What’s Vulnerable › Vulnerabilities

CVE-2024-44113: Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-10 · updated 2026-06-17
• Weakness: CWE-359

Description

Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.

Affected products

• SAP_SE SAP Business Warehouse (BEx Analyzer): DW4CORE 200, DW4CORE 300, DW4CORE 400, SAP_BW 700, SAP_BW 701, SAP_BW 702 (+11)

References

• https://me.sap.com/notes/3481992
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2024-44113 or the next vulnerability affects your stack