CVE-2024-42374

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering PDF creation unavailable. This affects...

CVE-2024-42374

CVE-2024-42374 affects the SAP BEx Web Java Runtime Export Web Service. The issue is insufficient validation of an XML document from an untrusted source, enabling an attacker to retrieve information from the SAP ADS system and exhaust the XMLForm service, which makes SAP ADS rendering (PDF creati...