Skip to content
OpenAdvisories

Product · SAP

SAP Document Builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-39591

    Missing Authorization check in SAP Document Builder

    SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

    SAP SAP Document Builder
  • Medium 6.5
    CVE-2024-34683

    Unrestricted file upload in SAP Document Builder (HTTP service)

    An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.

    SAP SAP Document Builder