Application Interface Framework (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2024-01-09. Vendor: Sap.

CVEs of Application Interface Framework

• CVE-2024-21737 - CVSS 9.1 (critical), 2024-01-09: In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and…
• CVE-2023-29111 - CVSS 4.3 (medium), 2023-04-11: The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected…
• CVE-2023-29110 - CVSS 5.4 (medium), 2023-04-11: The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows…
• CVE-2023-29109 - CVSS 4.6 (medium), 2023-04-11: The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application…