Known vulnerabilities in Enterprise Project Connection

Vendor: SAP
Software: Enterprise Project Connection
Software CPE: cpe:2.3:a:sap:enterprise_project_connection:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enterprise Project Connection Enterprise Project Connection is affected by 7 known vulnerabilities: 1 high, 6 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100680 - Improper input validation
CVE-2024-38828		 CWE-20 Medium
No
No
 - 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98795 - Security Features
CVE-2024-38820		 CWE-254 Medium
No
No
 - 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 - 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 - 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 - 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more