SAP Manufacturing Execution vulnerabilities

3 CVEs affecting SAP Manufacturing Execution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39802, published 2022-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-39802, published 2022-10-11. High severity, CVSS 7.5. EPSS: 9.1% chance of exploitation in the next 30 days. SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow…
CVE-2021-27615, published 2021-06-09. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response. The lack of these headers in response can be exploited by the…
CVE-2021-27600, published 2021-04-13. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP…