Login Request a demo
CC
Product
Cloud Connector
by Sap · last CVE Feb 13, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 2Medium 2Low 1
Severity
All severities8Critical3High2Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cloud Connector to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0247
9.8
1%
Jan 8
SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application
Affected: before 2.11.3
CVE-2019-0246
9.8
3%
Jan 8
SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity
Affected: before 2.11.3
CVE-2021-33695
9.1
1%
Sep 15
Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate
Affected: 2.0
CVE-2021-33692
7.5
1%
Sep 15
SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup
Affected: 2.0
CVE-2024-25642
7.4
1%
Feb 13
Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual…
Affected: 2.0
CVE-2021-33693
6.8
1%
Sep 15
SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command…
Affected: 2.0
CVE-2021-33694
4.8
0%
Sep 15
SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored…
Affected: 2.0
CVE-2023-49578
3.5
0%
Dec 12
SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads…
Affected: 2.0
Showing 8