Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-34689

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Published

2024-07-09T05:15:10.873

Last Modified

2024-11-21T09:19:12.067

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.0 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-918
  • Type: Primary
    CWE-918
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap business_workflow * Yes
Application sap sap_basis 700 Yes
Application sap sap_basis 701 Yes
Application sap sap_basis 702 Yes
Application sap sap_basis 731 Yes
Application sap sap_basis 740 Yes
Application sap sap_basis 750 Yes
Application sap sap_basis 751 Yes
Application sap sap_basis 752 Yes
Application sap sap_basis 753 Yes
Application sap sap_basis 754 Yes
Application sap sap_basis 755 Yes
Application sap sap_basis 756 Yes
Application sap sap_basis 757 Yes
Application sap sap_basis 758 Yes
References