CVE-2022-27668

CVE-2022-27668 describes an improper access control in SAProuter related to the saprouttab route-permission configuration. An unauthenticated remote attacker can issue SAProuter administration commands, potentially stopping SAProuter and severely impacting availability. Affected components/versio...

CVE-2014-0984

The CVE-2014-0984 issue affects SAP Router (versions 721 patch 117, 720 patch 411, 710 patch 029 and earlier) where the passwordCheck function uses a non-constant-time comparison, leaking timing information that enables remote attackers to recover route-entry passwords via a timing side-channel. ...