What is the severity of CVE-2024-34687?

CVE-2024-34687 has been classified as a medium severity vulnerability due to its potential impact on user data.

How do I fix CVE-2024-34687?

To fix CVE-2024-34687, prompt updates should be applied to the affected versions of SAP NetWeaver Application Server for ABAP and the ABAP Platform.

What type of vulnerability is CVE-2024-34687?

CVE-2024-34687 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code in the user's browser.

Who is affected by CVE-2024-34687?

CVE-2024-34687 affects users and administrators operating the SAP NetWeaver Application Server for ABAP and ABAP Platform.

What could be the impact of exploiting CVE-2024-34687?

Exploiting CVE-2024-34687 could result in the modification or deletion of user data, as well as the potential for session hijacking.

Vulnerability/
CVE-2024-34687

medium

6.5

CWE

EPSS

0.043%

14/5/2024

2/8/2024

CVE-2024-34687: Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform

First published: Tue May 14 2024(Updated: )

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, including accessing or deleting files, or stealing session cookies which an attacker could use to hijack a user’s session. Hence, this could have impact on Confidentiality, Integrity and Availability of the system.

Credit: cna@sap.com

Affected Software	Affected Version	How to fix
SAP NetWeaver AS ABAP Kernel
SAP ABAP

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-34687?
CVE-2024-34687 has been classified as a medium severity vulnerability due to its potential impact on user data.
How do I fix CVE-2024-34687?
To fix CVE-2024-34687, prompt updates should be applied to the affected versions of SAP NetWeaver Application Server for ABAP and the ABAP Platform.
What type of vulnerability is CVE-2024-34687?
CVE-2024-34687 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code in the user's browser.
Who is affected by CVE-2024-34687?
CVE-2024-34687 affects users and administrators operating the SAP NetWeaver Application Server for ABAP and ABAP Platform.
What could be the impact of exploiting CVE-2024-34687?
Exploiting CVE-2024-34687 could result in the modification or deletion of user data, as well as the potential for session hijacking.

agent/weakness
agent/title
agent/references
agent/type
agent/first-publish-date
agent/description
agent/severity
agent/author
agent/event
collector/nvd-api
source/NVD
collector/epss-latest
source/FIRST
agent/epss
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/sap
canonical/sap netweaver as abap kernel
canonical/sap abap

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.