Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2024-34692

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited impact on confidentiality and Integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Enable Now

Default version status: unaffected

  • WPB_MANAGER_CE 10affected
  • WPB_MANAGER_HANA 10affected
  • ENABLE_NOW_CONSUMP_DEL 1704affected

References