10 matches found
EUVD-2014-6728
Malware in sbrugna...
EUVD-2025-17597
Malicious code in bioql PyPI...
EUVD-2024-28148
Malicious code in bioql PyPI...
CVE-2025-42991
SAP S/4HANA Bank Account Application is affected by a Missing Authorization check vulnerability. An authenticated "+approver" user can delete attachments from another user’s bank account application, causing low integrity impact (no confidentiality or availability impact). Root cause identified a...
CVE-2025-42991 Missing Authorization check in SAP S/4HANA (Bank Account Application)
SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...
CVE-2025-42991 Missing Authorization check in SAP S/4HANA (Bank Account Application)
SAP S/4HANA Bank Account Application does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the...
PT-2025-24593 · Sap · Sap S/4Hana
Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue concerns a lack of necessary authorization checks in the Bank Account Application. This allows an authenticated 'approver' user to delete attachments from another user's bank...
CVE-2024-30217
Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application...
CVE-2024-30217
CVE-2024-30217 – SAP S/4HANA Cash Management : The vulnerability arises because the Cash Management component does not perform necessary authorization checks for an authenticated user, enabling privilege escalation to approve or reject a bank account application. This specifically affects the int...
CVE-2017-4959
An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causi...