What’s Vulnerable › Vulnerabilities
CVE-2024-41729: Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-10 · updated 2026-06-17
- Weakness: CWE-359
Description
Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.
Affected products
- SAP_SE SAP NetWeaver BW (BEx Analyzer): DW4CORE 200, DW4CORE 300, DW4CORE 400, SAP_BW 700, SAP_BW 701, SAP_BW 702 (+11)
References
Get alerted when CVE-2024-41729 or the next vulnerability affects your stack