9 matches found
EUVD-2024-41416
Malicious code in bioql PyPI...
CVE-2024-45284
An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application...
CVE-2024-45284
An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application...
CVE-2024-45284
Technical details about CVE-2024-45284 are not publicly available in the supplied documents. No explicit affected versions, root cause specifics, or mitigations are provided here. Monitor for updates from SAP and security advisories.
CVE-2024-42373
SAP Student Life Cycle Management SLcM fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing...
CVE-2024-42373
CVE-2024-42373 describes an authorization issue in SAP Student Life Cycle Management (SLcM). The authenticated-user flow fails to enforce proper access checks, enabling a potential escalation of privileges. According to multiple sources, exploitation could allow an attacker to delete non-critical...
CVE-2024-34690
SAP Student Life Cycle Management SLcM fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted,...
CVE-2024-34690
CVE-2024-34690 affects SAP Student Life Cycle Management (SLcM). The provided documents describe a logic flaw where authenticated users bypass authorization checks, enabling privilege escalation to access and edit non‑sensitive report variants that are normally restricted. The disclosed impact is...
CVE-2024-34690 Missing Authorization check in SAP Student Life Cycle Management (SLcM)
SAP Student Life Cycle Management SLcM fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted,...