HA
Product
Host Agent
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 7Low 0
Watch
Add Host Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24523 | 8.8 | Feb 14 | An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted… Affected: 7.21; 7.22 |
| CVE-2023-40308 | 7.5 | Sep 12 | SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes… Affected: 722 |
| CVE-2020-6186 | 7.5 | Feb 12 | SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of… Affected: 7.21 |
| CVE-2017-15297 | 7.5 | Oct 16 | SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint Affected: 7.21 |
| CVE-2023-27498 | 7.2 | Mar 14 | SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request… Affected: 7.22 |
| CVE-2020-6234 | 7.2 | Apr 14 | SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to… Affected: 7.21 |
| CVE-2024-47595 | 7.1 | Nov 12 | An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access Affected: 7.22 |
Showing 7