SAP GUI vulnerabilities

2 CVEs affecting SAP GUI, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4830, published 2009-04-16.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-4830, published 2009-04-16. High severity, CVSS 9.3. EPSS: 27.6% chance of exploitation in the next 30 days. Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite…
• CVE-2008-4827, published 2009-01-08. High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne…