CVE-2022-29613

SAP Employee Self Service is affected by an input validation flaw that allows an authenticated user to change an employee number, enabling viewing of other users’ personal details and resulting in limited confidentiality impact. The root cause cited across sources is insufficient input validation...