SAP

Bw/4hana

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-37176

  • EPSS 0.1%
  • Published 11.06.2024 03:15:12
  • Last modified 21.11.2024 09:23:21

SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on...

6.5

CVE-2023-33992

  • EPSS 0.09%
  • Published 11.07.2023 03:15:09
  • Last modified 21.11.2024 08:06:22

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To b...

8.8

CVE-2021-21466

Exploit
  • EPSS 0.7%
  • Published 12.01.2021 15:15:15
  • Last modified 21.11.2024 05:48:25

SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attac...

9.1

CVE-2020-26838

  • EPSS 2%
  • Published 09.12.2020 17:15:31
  • Last modified 21.11.2024 05:20:22

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute ...

8.8

CVE-2019-0243

  • EPSS 0.52%
  • Published 08.01.2019 20:29:00
  • Last modified 21.11.2024 04:16:34

Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.