Lucene search
K

CVE-2023-40625

🗓️ 12 Sep 2023 02:00:13Reported by sapType 
cve
 cve
🔗 web.nvd.nist.gov👁 36 Views

S4CORE (Manage Purchase Contracts App) - versions 102-107, lacks authorization checks for authenticated user, allowing privilege escalation

Related
Detection
Affected
Refs
NVD
Vulners
Node
saps4coreMatch102
OR
saps4coreMatch103
OR
saps4coreMatch104
OR
saps4coreMatch105
OR
saps4coreMatch106
OR
saps4coreMatch107
[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Manage Purchase Contracts App",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "S4CORE 102"
      },
      {
        "status": "affected",
        "version": "S4CORE 103"
      },
      {
        "status": "affected",
        "version": "S4CORE 104"
      },
      {
        "status": "affected",
        "version": "S4CORE 105"
      },
      {
        "status": "affected",
        "version": "S4CORE 106"
      },
      {
        "status": "affected",
        "version": "S4CORE 107"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 08:19Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.15.4
EPSS0.00147
SSVC
36