CVE-2024-39591
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Authorization check in SAP Document Builder
SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Document Builder
- Vendor
- SAP_SE
- Product
- SAP Document Builder
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| S4FND 102 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 103 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 104 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 105 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 106 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 108 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 702 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 731 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 746 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 747 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 748 | affected | Unavailable | Unavailable | Unavailable | None listed |