SAP EMR Unwired vulnerabilities

2 CVEs affecting SAP EMR Unwired, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2814, published 2015-04-01.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-7096, published 2013-12-13. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
• CVE-2015-2814, published 2015-04-01. Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days. SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt) does not properly restrict access, which allows remote attackers to change the backendurl,…