CVE-2024-37179

6.5 mediumEPSS 0.4%

Medium (6.5) in sap businessobjects business intelligence. EPSS 0.4% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2024-10-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:businessobjects_business_intelligence

References

https://me.sap.com/notes/3478615
https://url.sap/sapsecuritypatchday

Check your stack JSON