1941 matches found
CVE-2025-26656
OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...
CVE-2025-29997
This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts...
CVE-2025-26655
SAP Just In TimeJIT does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted...
CVE-2025-26656
OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...
CVE-2025-26656
CVE-2025-26656 affects SAP S/4HANA via the OData service in Manage Purchasing Info Records. The root cause is missing authorization checks for an authenticated user, enabling privilege escalation with a low integrity impact. CVSS 3.1 vector shows low privileges required and low impact. No exploit...
CVE-2025-26655 Missing Authorization check in SAP JIT(Outbound)
SAP Just In TimeJIT does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted...
CVE-2025-26655
CVE-2025-26655 concerns SAP Just In Time (JIT) outbound components. The connected documents indicate a root cause of missing authorization checks for an authenticated user, allowing privilege escalation to restricted actions. According to the sources, the resulting impact is described as low on i...
SAP Business Warehouse 安全漏洞
SAP Business Warehouse is a key component for executing business processes from SAP, Germany, that allows users to design, implement, and manage business processes, ensure process compliance, and reduce the need for manual operations through automation. A security vulnerability exists in SAP...
SAP NetWeaver ABAP Server 安全漏洞
SAP NetWeaver ABAP Server is a web application server from SAP, Germany, that is used as a web application server for SAP products. A security vulnerability exists in SAP NetWeaver ABAP Server that stems from a lack of authorization checking and could lead to elevated privileges and information...
SAP S/4HANA 安全漏洞
SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A security vulnerability exists in SAP S/4HANA that stems from a lack of authorization checking, which could be exploited by an attacker to gain unauthorized access to...
SAP Just In Time 安全漏洞
SAP Just In Time SAP JIT is an application from SAP, Germany, designed to enable efficient demand-driven production and logistics throughout the supply chain. A security vulnerability exists in SAP Just In Time that stems from a failure to perform required authorization checks, which could result...
CVE-2025-27666
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010...
CVE-2025-27666
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010...
Vasion Print 安全漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from inadequate authorization checks...
Insufficient Capability Checks
moodle/moodle is vulnerable to Insufficient capability checks. The vulnerability is due to missing or improper authorization checks before allowing badge modifications, allows users to perform actions beyond their intended permissions...
CVE-2024-45081
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks...
PT-2025-7637 · Unknown · Application
Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue concerns the lack of authorization checks for the Host parameter, allowing unauthorized access to view profile information of other users. An attacker can exploit this by...
CVE-2024-5705
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before...