CVE-2024-30215: Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30215?
CVE-2024-30215 is rated as a high severity vulnerability due to its potential to allow high privilege attackers to exploit the Resource Settings page.
How do I fix CVE-2024-30215?
To fix CVE-2024-30215, update your SAP Business Connector to the latest version released by SAP that addresses this vulnerability.
What are the potential impacts of CVE-2024-30215?
CVE-2024-30215 may allow attackers to obtain and modify sensitive information when users visit the affected page.
Who is affected by CVE-2024-30215?
CVE-2024-30215 affects users of SAP Business Connector who access the Resource Settings page without proper security measures.
Is there a workaround for CVE-2024-30215?
Currently, the recommended solution for CVE-2024-30215 is to apply the security updates provided by SAP rather than seeking a workaround.