CVE-2022-45338

An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file...

SAP Payment Engine Elevation of Privilege Vulnerability

SAP Payment Engine is a software application from SAP. It provides a simplified end-to-end payment processing on a centralized platform. A security vulnerability exists in SAP Payment Engine version 500, which can be exploited by an attacker to perform the necessary authorization checks, resultin...

CVE-2021-21487

SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2021-21487

SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...