cveboard RSS feed

CVE-2024-34683

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Unrestricted file upload in SAP Document Builder (HTTP service)

An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP Document Builder

Vendor
SAP_SE
Product
SAP Document Builder
Platforms
Unknown
Default status
unaffected
SAP Document Builder · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
S4CORE 100affectedUnavailableUnavailableUnavailableNone listed
101affectedUnavailableUnavailableUnavailableNone listed
S4FND 102affectedUnavailableUnavailableUnavailableNone listed
103affectedUnavailableUnavailableUnavailableNone listed
104affectedUnavailableUnavailableUnavailableNone listed
105affectedUnavailableUnavailableUnavailableNone listed
106affectedUnavailableUnavailableUnavailableNone listed
107affectedUnavailableUnavailableUnavailableNone listed
108affectedUnavailableUnavailableUnavailableNone listed
SAP_BS_FND 702affectedUnavailableUnavailableUnavailableNone listed
731affectedUnavailableUnavailableUnavailableNone listed
746affectedUnavailableUnavailableUnavailableNone listed
747affectedUnavailableUnavailableUnavailableNone listed
748affectedUnavailableUnavailableUnavailableNone listed