Sap Netweaver Guided Procedures vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sap Netweaver Guided Procedures, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

HighCVE-2021-33671sap se · sap netweaver guided procedures (administration workset) +1 more5y agosap se sap netweaver guided procedures (administration workset)SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality restricted to a particular user group, and could allow unauthorized users to read, modify or delete restricted data.EPSS0.73%MediumCVE-2020-6187sap_se · sap netweaver (guided procedures) +1 more6y agosap_se sap netweaver (guided procedures)SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.EPSS0.86%