Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2023/12/13 1:34 p.m.•40 views

Improper Privilege Management in github.com/sap/cloud-security-client-go

Impact SAP BTP Security Services Integration Library Golang github.com/sap/cloud-security-client-go allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application. Patches Upgrade to...

9.8CVSS7.4AI score0.01127EPSS
SaveExploits0References9Affected Software1
attackerkb
attackerkb
•added 2023/12/12 2:15 a.m.•11 views

CVE-2023-49583

SAP BTP Security Services Integration Library Node.js @sap/xssec - versions 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application...

9.8CVSS7.4AI score0.01085EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2023/12/12 1:52 a.m.•51 views

CVE-2023-50423 Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)

SAP BTP Security Services Integration Library Python sap-xssec - versions 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application...

9.1CVSS9.8AI score0.01109EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2023/12/12 1:31 a.m.•38 views

CVE-2023-50422 Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)

SAP BTP Security Services Integration Library Java cloud-security-services-integration-library - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary...

9.1CVSS9.9AI score0.01355EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•1 views

CVE-2023-50424: Exposed Dangerous Method or Function

SAP BTP Security Services Integration Library Golang github.com/sap/cloud-security-client-go - versions 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application...

9.8CVSS8.2AI score0.01127EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•1 views

CVE-2023-50422: Exposed Dangerous Method or Function

SAP BTP Security Services Integration Library Java cloud-security-services-integration-library - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary...

9.8CVSS8.2AI score0.01355EPSS
SaveExploits0References2
Rows per page
Query Builder