Search Icon

SAP Security Notes Review: July 2024

09 July 2024

banner image

Overview

SAP’s security patch day for July 2024 has seen the release of 16 OSS SAP security notes. Two notes have been classified as high, 13 as medium, and one as low based on the latest CVSS v3.0 Rating.  

July 2024 CVSS v3 Base Score Graph

Three notes have been released for:

  • SAP Business Workflow
  • SAP NetWeaver AS ABAP

Two notes have been released for:

  • SAP S/4HANA
  • SAP Enable Now

Single notes have been released for:

  • SAP Commerce
  • SAP Business Warehouse
  • SAP Transportation Management
  • SAP NetWeaver Knowledge Management
  • SAP Landscape Management
  • SAP GUI

July 2024 Product Category Graph

Vulnerabilities: July 2024 Highlights

[CVE-2024-39597] Improper Authorisation Checks on Early Login Composable Storefront B2B sites of SAP Commerce (SAP Note 3490515)

A user can misuse the forgotten password functionality in SAP Commerce to gain access to a Composable Storefront B2B site. This activates early login and registration without requiring the merchant to approve the account beforehand.

[CVE-2024-39592] Missing Authorisation check in SAP PDCE (SAP Note 3483344)

Elements of PDCE do not perform necessary authorisation checks for an authenticated user, resulting in escalation of privileges.

[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services) (SAP Note 3458789)
WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests.

Related Blogs

SAP SuccessFactors Agentic AI: Joule and AI Agents

24 August 2026

SAP SuccessFactors - From Systems of Record to Systems of Intelligence

Pricefx blog banner

21 August 2026

"We Already Have a CRM." Why That Isn't a Pricing Strategy.

Leveraging claude in sap successfactors

17 August 2026

Leveraging claude in sap successfactors

AI-embedded SAP Blog banner

29 July 2026

AI Built In, Not Bolted On: What AI-Embedded AMS Actually Looks Like

Rethinking blog banner

28 July 2026

Rethinking Application Managed Services for HR Shared Services

successfactor blog banner

22 July 2026

Is Your SAP SuccessFactors Environment Ready for SAP Business AI and Joule?

Pricefx Certified

13 July 2026

Beyond the Platform: Why Certified Pricefx Experts Make the Difference

Right_Pricefx_Partner_Banner

19 June 2026

Choosing the Right Pricefx Partner for Pricing Transformation