SAP© Security Advisories - 06 2024 - SecurityBridge Cloud Platform

We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.
We hope you enjoy using it!

× Hey there! Glad you made it.
We have found 10 security advices for you to review.

Severity

SAP© Security advisories 10

System Types

Affected SAP© system types

_{Related note}
3460407

_CVSS
7.5

_{Affected system
type}
Java

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34688] Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)

Security Advisory

_{Related note}
3457265

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34690] Missing Authorization check in SAP Student Life Cycle Management (SLcM)

Security Advisory

_{Related note}
3453170

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-33001] Denial of service (DOS) in SAP NetWeaver and ABAP platform

Security Advisory

_{Related note}
3459379

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service)

Security Advisory

_{Related note}
3465455

_CVSS
5.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-37176] Missing Authorization check in SAP BW/4HANA Transformation and DTP

Security Advisory

_{Related note}
3441817

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34684] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)

Security Advisory

_{Related note}
3425571

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-28164] Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)

Security Advisory

_{Related note}
3465129

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34686] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)

Security Advisory

_{Related note}
3466175

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-34691] Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)

Security Advisory

_{Related note}
3457592

_CVSS
8.1

_{Affected system
type}
SAP Financial Consolidation

_Patchday
2024-06

_{Released
on}
2024/06/11

Description
[CVE-2024-37177] Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

Security Advisory

Notifications

Severity

SAP© Security advisories 10

System Types

Affected SAP© system types

Related note 3460407

CVSS 7.5

Affected system type Java

Patchday2024-06

Released on2024/06/11

Related note 3457265

CVSS 5.4

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3453170

CVSS 6.5

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3459379

CVSS 6.5

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3465455

CVSS 5.5

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3441817

CVSS 3.7

Affected system type BI/BO platform

Patchday2024-06

Released on2024/06/11

Related note 3425571

CVSS 5.3

Affected system type Java

Patchday2024-06

Released on2024/06/11

Related note 3465129

CVSS 6.1

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3466175

CVSS 6.5

Affected system type ABAP

Patchday2024-06

Released on2024/06/11

Related note 3457592

CVSS 8.1

Affected system type SAP Financial Consolidation

Patchday2024-06

Released on2024/06/11

_{Related note}
3460407

_CVSS
7.5

_{Affected system
type}
Java

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3457265

_CVSS
5.4

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3453170

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3459379

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3465455

_CVSS
5.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3441817

_CVSS
3.7

_{Affected system
type}
BI/BO platform

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3425571

_CVSS
5.3

_{Affected system
type}
Java

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3465129

_CVSS
6.1

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3466175

_CVSS
6.5

_{Affected system
type}
ABAP

_Patchday
2024-06

_{Released
on}
2024/06/11

_{Related note}
3457592

_CVSS
8.1

_{Affected system
type}
SAP Financial Consolidation

_Patchday
2024-06

_{Released
on}
2024/06/11