cve/2024/CVE-2024-34689.md

### [CVE-2024-34689](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34689)
![](https://img.shields.io/static/v1?label=Product&message=SAP%20Business%20Workflow%20(WebFlow%20Services)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20700%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20701%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20702%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20731%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20740%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20750%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20751%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20752%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20753%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20754%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20755%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20756%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20757%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SAP_BASIS%20758%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%3A%20Server-Side%20Request%20Forgery&color=brightgreen)

### Description

WebFlow Services of SAP Business Workflow allowsan authenticated attacker to enumerate accessible HTTP endpoints in theinternal network by specially crafting HTTP requests. On successfulexploitation this can result in information disclosure. It has no impact onintegrity and availability of the application.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds