SAP ERP Central Component vulnerabilities

3 CVEs affecting SAP ERP Central Component, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6284, published 2013-10-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6284, published 2013-10-26. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code…
CVE-2013-3244, published 2013-10-24. Medium severity, CVSS 6.0. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary…
CVE-2013-3061, published 2013-05-01. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows…