Description
An authenticated attacker can upload malicious
file to SAP Document Builder service. When the victim accesses this file, the
attacker is allowed to access, modify, or make the related information
unavailable in the victim’s browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Document Builder | S4CORE 100, 101, S4FND 102, 103, 104, 105, 106, 107, 108, SAP_BS_FND 702, 731, 746, 747, 748 | — |
Advisories 2
- NCSC-2024-0247 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Jun 11, 2024
- WID-SEC-2024-1327 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 10, 2024