Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-30215

Cross-Site Scripting (XSS) vulnerability in SAP Business Connector

Description

The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Connector

Default version status: unaffected

  • 4.8affected

References