SAP

Access Control

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-39801

  • EPSS 0.4%
  • Published 13.09.2022 16:15:09
  • Last modified 10.06.2025 14:15:24

SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the...

8.8

CVE-2021-44233

  • EPSS 0.41%
  • Published 14.12.2021 16:15:09
  • Last modified 21.11.2024 06:30:38

SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.