Lucene search
+L

167 matches found

NVD
NVD
•added 2026/10/13 1:16 a.m.•13 views

CVE-2026-58242

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

3.5CVSS0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/13 12:22 a.m.•38 views

CVE-2026-58242 Improper Authorization check in SAP Cloud Connector

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

3.5CVSS0.00157EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/13 12:22 a.m.•23 views

CVE-2026-58242

The SAP Cloud Connector contains an improper authorization check that can be exploited by a low-privileged attacker using specially crafted requests. This vulnerability requires the attacker to be on an adjacent network . Successful exploitation allows the attacker to obtain limited information a...

3.5CVSS5.8AI score0.00157EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/13 12:22 a.m.•12 views

EUVD-2026-98183

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

3.5CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-58242: Integer Underflow (Wrap or Wraparound)

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

3.5CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-111127

Name of the Vulnerable Software and Affected Versions SAP Cloud Connector affected versions not specified Description An improper authorization check allows a low-privileged attacker on an adjacent network to obtain limited information about internal systems by sending specially crafted requests...

3.5CVSS5.8AI score0.00157EPSS
SaveExploits0References5
NVD
NVD
•added 2026/06/12 2:16 a.m.•31 views

CVE-2026-45170

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

8.8CVSS0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/12 12:05 a.m.•105 views

CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

7.5CVSS0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/12 12:05 a.m.•24 views

CVE-2026-45170 Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

7.5CVSS5.7AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/12 12:05 a.m.•76 views

CVE-2026-45170

CVE-2026-45170 concerns Idira Privilege Cloud Connector, where versions prior to 1.1.100504 may not enforce TLS certificate validation under certain conditions/configurations. This could enable a potential security bypass affecting confidentiality, integrity, and availability, as indicated by the...

8.8CVSS5.7AI score0.00169EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/12 12:00 a.m.•34 views

PT-2026-48816

Name of the Vulnerable Software and Affected Versions Idira Privilege Cloud Connector versions prior to 1.1.100504 Description Under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced, potentially leading to a security bypass. TLS Transport Layer...

8.8CVSS5.7AI score0.00169EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:20 a.m.•26 views

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

7.7CVSS6.8AI score0.0054EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:20 a.m.•29 views

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

5.9CVSS6.3AI score0.00465EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:20 a.m.•25 views

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

7.5CVSS6.6AI score0.0117EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•21 views

SAP Cloud Connector Authentication Bypass

The vulnerability of the connection application between the cloud platform and the local system via SAP Cloud Connector is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected...

3.5CVSS6.6AI score0.00462EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-10043

Malware in sbrugna...

7.5CVSS7.3AI score0.01035EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-20372

Malware in sbrugna...

9.1CVSS7.2AI score0.00559EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-20369

Malware in sbrugna...

7.5CVSS6.5AI score0.0117EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2021-20370

Malware in sbrugna...

7.7CVSS6.7AI score0.0054EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-20371

Malware in sbrugna...

5.9CVSS6.3AI score0.00465EPSS
SaveExploits0References3
Rows per page
Query Builder