Sap Focused Run vulnerabilities

4 vulnerabilities

Known vulnerabilities in Sap Focused Run, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2021-27609sap sesap focused run+1
EPSS score
0.52%
SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.7.5CVE-2020-6369sap seca introscope enterprise manager (affected products: sap solution manager and sap focused run)+2
EPSS score
2.67%
SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of the service.4CVE-2022-27657sap sesap focused run (simple diagnostics agent)+1
EPSS score
2.51%
A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run (Simple Diagnostics Agent 1.0) - version 1.0.6.1CVE-2022-24399sap sesap focused run (real user monitoring)+1
EPSS score
1.41%
The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting (XSS) vulnerability.