SAP Sapscore vulnerabilities

7 CVEs affecting SAP Sapscore, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29188, published 2023-05-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-33701, published 2021-09-15. Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days. DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105,…
CVE-2018-2484, published 2019-01-08. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does…
CVE-2018-2419, published 2018-05-09. Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days. SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated…
CVE-2019-0245, published 2019-01-08. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…
CVE-2019-0244, published 2019-01-08. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…
CVE-2022-31597, published 2022-07-12. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a…
CVE-2023-29188, published 2023-05-09. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF…