CVE-2024-33004

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-524 CWE-922

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-330056.3Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP CVE-2024-330069.6An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely co CVE-2024-330073.5PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document con CVE-2024-330084.9SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication CVE-2024-330094.2SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database CVE-2024-33018.5An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication rem CVE-2024-330107.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330117.5Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.CVE-2024-330127.5Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.CVE-2024-330137.5Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.CVE-2024-330147.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330157.5Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor repo