SAP SE SAP Identity Management vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Identity Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2018-2417sap_se · sap identity management +1 moresap_se sap identity managementUnder certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherwise be restricted.EPSS1.26%MediumCVE-2020-6258sap_se · sap identity management +1 moresap_se sap identity managementSAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check.EPSS0.68%LowCVE-2026-0504sap_se · sap identity managementInsufficient Input Handling in JNDI Operations of SAP Identity ManagementDue to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification of data, resulting in low impact on confidentiality and integrity, with no impact on application availability.EPSS0.20%