CVE-2024-22129: SAP Companion

High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information and cause minor impact on the integrity of the web application.

Affected products

• SAP Companion: before 3.1.38 (fixed in 3.1.38)

Published 2024-02-13. Last modified 2026-06-17.