CVE-2024-30214: SAP SE SAP Business Connector

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the parameter contains a JavaScript, the script could be processed on client side.

Affected products

• SAP SE SAP Business Connector: version 4.8 only

Published 2024-04-09. Last modified 2026-06-17.