Vulnerability Description
PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript (or any harmful client-side script), the PDFViewer will execute the JavaScript embedded in the PDF which can cause a potential security threat.
CVSS Score
LOW
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3446076
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
- https://me.sap.com/notes/3446076
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
FAQ
What is CVE-2024-33007?
CVE-2024-33007 is a vulnerability with a CVSS score of 3.5 (LOW). PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript (or any harmful client-side script...
How severe is CVE-2024-33007?
CVE-2024-33007 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-33007?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.