SAP ERP Human Capital Management vulnerabilities

2 CVEs affecting SAP ERP Human Capital Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22535, published 2022-02-09.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22535, published 2022-02-09. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only…
• CVE-2021-42062, published 2021-11-10. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll…