Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sap disclosure management vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-41274
SAP Disclosure Management - version 10.1, allows an authenticated malicious user to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like ...
Sap Disclosure Management 10.1
6
CVSSv2
CVE-2020-6209
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check.
Sap Disclosure Management 10.1
6.8
CVSSv2
CVE-2020-6289
SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user in to browsing malicious site.
Sap Disclosure Management 10.1
6.8
CVSSv2
CVE-2020-6290
SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID.
Sap Disclosure Management 10.1
6.5
CVSSv2
CVE-2020-6292
Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.
Sap Disclosure Management 10.1
6.5
CVSSv2
CVE-2019-0258
SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Sap Disclosure Management 10.01
4
CVSSv2
CVE-2019-0399
SAP Portfolio and Project Management, prior to S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Sap Portfolio And Project Management Cprxrpm 500 702
Sap Portfolio And Project Management Cprxrpm 600 740
Sap Portfolio And Project Management Cprxrpm 610 740
Sap Portfolio And Project Management Eppm 100
Sap Portfolio And Project Management S4core 102
Sap Portfolio And Project Management S4core 103
5
CVSSv2
CVE-2021-21469
When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any ...
Sap Netweaver Master Data Management 7.10.750
Sap Netweaver Master Data Management 710
Sap Netweaver Master Data Management 7.10
4.8
CVSSv2
CVE-2021-21482
SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful, the attacker could obtain access to highly sensitive data and MDM administrativ...
Sap Netweaver Master Data Management 7.10.750
Sap Netweaver Master Data Management 710
NA
CVE-2023-26458
An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and ...
Sap Landscape Management 3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »