VULNERABILITY INTELLIGENCE

CVE-2024-34689

CVSS score5 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Weakness classification

  • cna@sap.com: CWE-918
  • nvd@nist.gov: CWE-918

Primary references