SAP SE SAP Business Connector vulnerabilities

2 CVEs affecting SAP SE SAP Business Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30215, published 2024-04-09.

More from SAP SE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-30215, published 2024-04-09. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be…
• CVE-2024-30214, published 2024-04-09. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the…