CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

Authorization

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

CVE-2018-2461

CVE-2018-2461 affects SAP HCM Fiori People Profile GBX01 HR 6.0. The vulnerability is due to a missing authorization check, enabling an authenticated user to escalate privileges. Public sources (NVD/CNVD) corroborate a privilege-elevation issue in this component. Severity: CVSSv3 base score 8.8 (...

CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

CVE-2018-2370

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

CVE-2018-2370

CVE-2018-2370 describes an SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad (versions 4.10, 4.20, 4.30 and later in the affected line). The issue could let an attacker use standard techniques to determine which backend ports are in use. The connected docum...

SAP Fiori Client - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application SAP Fiori Client published at the 'play' market has multiple vulnerabilities...