Fiori (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-02-13. Vendor: Sap.

CVEs of Fiori

• CVE-2024-25643 - CVSS 4.3 (medium), 2024-02-13: The SAP Fiori app (My Overtime Request) - version 605, does not perform the necessary authorization checks for an authenticated user which may result in an…
• CVE-2023-24528 - CVSS 6.5 (medium), 2023-02-14: SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured…
• CVE-2020-6266 - CVSS 5.4 (medium), 2020-06-10: SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading…
• CVE-2018-2474 - CVSS 6.5 (medium), 2018-10-09: SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to…