Sap Fiori vulnerabilities
4 vulnerabilities
Known vulnerabilities in Sap Fiori, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2018-2474sap · fiori +1 moresap fioriSAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.EPSS0.67%MediumCVE-2020-6266sap se · sap fiori for sap s/4hana +1 moresap se sap fiori for sap s/4hanaSAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.EPSS0.61%MediumCVE-2024-25643sap_se · sap fiori app (my overtime requests) +1 moreMissing authorization check in SAP Fiori app (My Overtime Requests)The SAP Fiori app (My Overtime Request) - version 605, does not perform the necessary authorization checks for an authenticated user which may result in an escalation of privileges. It is possible to manipulate the URLs of data requests to access information that the user should not have access to. There is no impact on integrity and availability.EPSS0.32%MediumCVE-2023-24528sap · fiori +1 moresap fioriSAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.EPSS0.49%