Vulnerability Description
The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the parameter contains a JavaScript, the script could be processed on client side.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3421453
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?an
- https://me.sap.com/notes/3421453
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?an
FAQ
What is CVE-2024-30214?
CVE-2024-30214 is a vulnerability with a CVSS score of 4.8 (MEDIUM). The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the param...
How severe is CVE-2024-30214?
CVE-2024-30214 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-30214?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.