SAP Graphical User Interface vulnerabilities

3 CVEs affecting SAP Graphical User Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49580, published 2023-12-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-49580, published 2023-12-12. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be…
CVE-2011-5154, published 2012-09-06. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the…
CVE-2021-21448, published 2021-01-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can…