CVE-2024-34689 is a medium-severity information disclosure vulnerability affecting the WebFlow Services of SAP Business Workflow and SAP_BASIS. An authenticated attacker can exploit this flaw by crafting specific HTTP requests to enumerate internal network HTTP endpoints, potentially revealing sensitive network architecture. While the vulnerability has no impact on integrity or availability, its CVSS score is 5.0, indicating a network-based attack with low privileges and complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:sap:business_workflow:*:*:*:*:*:*:*:* | ||
700CPE matchmatch criteria | cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:* | ||
701CPE matchmatch criteria | cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:* | ||
702CPE matchmatch criteria | cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:* | ||
731CPE matchmatch criteria | cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.