Bex Web Java Runtime Export Web Service Security Vulnerabilities - February

CVE-2024-42374

BEx Web Java Runtime Export Web Service does notsufficiently validate an XML document accepted from an untrusted source. Anattacker can retrieve information from the SAP ADS system and exhaust thenumber of XMLForm service which makes the SAP ADS rendering (PDF creation)unavailable. This affects the...