Known vulnerabilities in SAP Disclosure Management
Vendor:
SAP
Software:
SAP Disclosure Management
Software CPE:
cpe:2.3:a:sap:sap_disclosure_management:*:*:*:*:*:*:*:*
Website:
https://www.sap.com/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU48828 - Improper Control of Generation of Code ('Code Injection') CVE-2020-26828 |
CWE-94 | Low | - | 08.12.2020 |
SB2020120815 |
||
| #VU29718 - Permissions, Privileges, and Access Controls CVE-2020-6267 |
CWE-264 | Medium | - | 14.07.2020 |
SB2020071405 |
||
| #VU29719 - Permissions, Privileges, and Access Controls CVE-2020-6289 |
CWE-264 | Medium | - | 14.07.2020 |
SB2020071405 |
||
| #VU29720 - Permissions, Privileges, and Access Controls CVE-2020-6290 |
CWE-264 | Medium | - | 14.07.2020 |
SB2020071405 |
||
| #VU29721 - Permissions, Privileges, and Access Controls CVE-2020-6291 |
CWE-264 | Medium | - | 14.07.2020 |
SB2020071405 |
||
| #VU29722 - Permissions, Privileges, and Access Controls CVE-2020-6292 |
CWE-264 | Medium | - | 14.07.2020 |
SB2020071405 |
||
| #VU17724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0254 |
CWE-79 | Low | - | 15.02.2019 |
SB2019021223 |
||
| #VU17660 - Missing Authorization CVE-2019-0258 |
CWE-862 | Low | - | 13.02.2019 |
SB2019021223 |