DM
Product
Disclosure Management
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 7Low 0
Watch
Add Disclosure Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41274 | 6.5 | Dec 13 | SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data Affected: 10.1 |
| CVE-2018-2403 | 6.5 | Apr 10 | Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted Affected: 10.1 |
| CVE-2020-26828 | 6.4 | Dec 9 | SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type Affected: 10.1 |
| CVE-2020-6290 | 6.3 | Jul 14 | SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID Affected: 10.1 |
| CVE-2020-6267 | 5.4 | Jul 14 | Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag Affected: 10.1 |
| CVE-2020-6303 | 5.4 | Jan 14 | SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting Affected: before 10.1 |
| CVE-2019-0254 | 5.4 | Feb 15 | SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability Affected: before 10.1 |
Showing 7