Focused Run (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2022-04-12. Vendor: Sap.

CVEs of Focused Run

• CVE-2022-27657 - CVSS 2.7 (low), 2022-04-12: A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path…
• CVE-2022-24399 - CVSS 6.1 (medium), 2022-03-10: The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using…
• CVE-2021-27609 - CVSS 6.5 (medium), 2021-04-13: SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service…
• CVE-2020-6369 - CVSS 7.5 (high), 2020-10-20: SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the…