CVE-2024-30215: SAP SE SAP Business Connector

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited.

Affected products

• SAP SE SAP Business Connector: version 4.8 only

Published 2024-04-09. Last modified 2026-06-17.