CVE-2024-42374

Summary

CVE-2024-42374 is a vulnerability affecting SAP's BEx Web Java Runtime Export Web Service. The issue lies in insufficient validation of XML documents received from untrusted sources. An attacker can exploit this flaw to retrieve sensitive information from the SAP ADS system and exhaust the XMLForm service, leading to unavailability of the PDF creation rendering in SAP ADS. This vulnerability impacts the confidentiality and availability of the application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.