Cloud Connector (Sap) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2024-02-13. Vendor: Sap.
CVEs of Cloud Connector
- CVE-2024-25642 - CVSS 7.4 (high), 2024-02-13: Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the…
- CVE-2023-49578 - CVSS 3.5 (low), 2023-12-12: SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious…
- CVE-2021-33692 - CVSS 7.5 (high), 2021-09-15: SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/'…
- CVE-2021-33695 - CVSS 9.1 (critical), 2021-09-15: Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
- CVE-2021-33694 - CVSS 5.9 (medium), 2021-09-15: SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious…
- CVE-2021-33693 - CVSS 6.8 (medium), 2021-09-15: SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead…
- CVE-2019-0247 - CVSS 9.8 (critical), 2019-01-08: SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the…
- CVE-2019-0246 - CVSS 9.8 (critical), 2019-01-08: SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.
