CVE-2020-6258

CVE-2020-6258 affects SAP Identity Management 8.0, where an authenticated user workflow does not perform necessary authorization checks, enabling viewing of certain sensitive information by the attacker (Missing Authorization Check). The connected documents confirm the affected product/version an...

CVE-2019-0301

Technical details (affected product/versions, root cause, impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2018-2417

CVE-2018-2417 affects SAP Identity Management 8.0, where a condition related to the ToASCII pass may enable an attacker to access information that should be restricted. The connected documents confirm the vulnerability as an information-disclosure issue but do not provide concrete technical detai...

CVE-2018-2416

CVE-2018-2416 affects SAP Identity Management 7.2 and 8.0, where XML from an untrusted source is not properly validated. Connected sources describe an XML External Entity Injection risk that could lead to information disclosure or denial of service. The documents do not specify affected subcompon...