Lucene search
+L

32 matches found

RedhatCVE
RedhatCVE
•added 2026/01/14 1:22 a.m.•17 views

CVE-2026-0504

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

3.8CVSS6.4AI score0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/13 2:15 a.m.•20 views

CVE-2026-0504

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

3.8CVSS0.00199EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/13 1:14 a.m.•11 views

CVE-2026-0504 Insufficient Input Handling in JNDI Operations of SAP Identity Management

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

3.8CVSS5.6AI score0.00199EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/13 1:14 a.m.•53 views

CVE-2026-0504

CVE-2026-0504 affects SAP Identity Management REST interface. The issue arises from insufficient input handling that allows an authenticated administrator to send crafted REST requests processed by JNDI operations without proper input neutralization. According to multiple sources, this can lead t...

3.8CVSS5.6AI score0.00199EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/13 1:14 a.m.•45 views

CVE-2026-0504 Insufficient Input Handling in JNDI Operations of SAP Identity Management

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

3.8CVSS0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2026-0504: Improper Neutralization of Special Elements in Data Query Logic

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

3.8CVSS5.5AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•14 views

SAP Identity Management 安全漏洞

SAP Identity Management is a suite of identity management applications from SAP Germany that can be embedded into business processes. A security vulnerability exists in SAP Identity Management that stems from insufficient input processing and could cause an authenticated administrator to submit a...

3.8CVSS5.8AI score0.00199EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-14272

Malware in sbrugna...

5.3CVSS6AI score0.0129EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-1074

Malware in sbrugna...

8.8CVSS7.8AI score0.0111EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-14271

Malware in sbrugna...

5.5CVSS6AI score0.01456EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-27408

Malware in sbrugna...

6.5CVSS6AI score0.0068EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 3:40 p.m.•20 views

CVE-2020-6258

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

6.5CVSS6.3AI score0.0068EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:10 a.m.•16 views

CVE-2019-0301

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing...

8.8CVSS7AI score0.0111EPSS
SaveExploits0References1
OSV
OSV
•added 2020/05/12 6:15 p.m.•18 views

CVE-2020-6258

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

6.5CVSS6AI score0.0068EPSS
SaveExploits0References2
NVD
NVD
•added 2020/05/12 6:15 p.m.•22 views

CVE-2020-6258

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

6.5CVSS4.8AI score0.0068EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/05/12 6:15 p.m.•8 views

CVE-2020-6258

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

6.5CVSS5.1AI score0.0068EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/05/12 6:15 p.m.•30 views

Authorization

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

4CVSS6.2AI score0.0068EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/05/12 5:57 p.m.•37 views

CVE-2020-6258

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

4.3CVSS6.3AI score0.0068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/12 12:00 a.m.•1 views

PT-2020-19053

Name of the Vulnerable Software and Affected Versions SAP Identity Management version 8.0 Description The issue allows an attacker to view certain sensitive information of the victim due to missing authorization checks for an authenticated user. Recommendations For SAP Identity Management version...

6.5CVSS0.0068EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/12 12:00 a.m.•6 views

CVE-2020-6258: Missing Authorization

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check...

6.5CVSS5.9AI score0.0068EPSS
SaveExploits0References2
Rows per page
Query Builder