What’s Vulnerable › Vulnerabilities
CVE-2024-30215: Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- Severity: medium (CVSS 4.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-09 · updated 2026-06-17
- Weakness: CWE-79
Description
The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited.
Affected products
References
- https://me.sap.com/notes/3421453
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
- https://me.sap.com/notes/3421453
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
Get alerted when CVE-2024-30215 or the next vulnerability affects your stack