Sap Fiori vulnerabilities

• sap fiori front end server Improper Access Control in SAP Fiori Front End Server CVE-2024-22133 4.6 MediumMarch 12, 2024
• sap fiori, sap se fiori app (my overtime requests) +1 more Missing authorization check in SAP Fiori app (My Overtime Requests) CVE-2024-25643 4.3 MediumFebruary 13, 2024
• sap fiori launchpad Client-Side Desynchronization vulnerability in SAP Fiori Launchpad CVE-2023-49584 4.3 MediumDecember 12, 2023
• sap hcm fiori app my forms (fiori 2.0), hcm fiori app my forms +1 more Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0) CVE-2023-1903 4.3 MediumApril 11, 2023
• sap fiori, fiori apps 1.0 for travel management in sap erp (my travel requests) +1 more SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an... CVE-2023-24528 6.5 MediumFebruary 14, 2023
• sap fiori launchpad Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs,... CVE-2022-26101 6.1 MediumMarch 8, 2022
• sap fiori client, sap se fiori client native mobile for android +1 more Task Hijacking is a vulnerability that affects the applications running on Android devices due to... CVE-2021-33699 Public exploit 7.6 HighAugust 10, 2021
• sap fiori apps 2.0 for travel management in sap erp SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization... CVE-2021-27605 4.3 MediumApril 13, 2021
• sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 more SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an... CVE-2020-26825 6.1 MediumNovember 13, 2020
• sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 more SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an... CVE-2020-26815 8.6 HighNovember 10, 2020
• sap fiori launchpad, sap se fiori(launchpad) +1 more SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the... CVE-2020-6283 4.8 MediumSeptember 9, 2020
• sap se s/4 hana (fiori ui for general ledger accounting), sap s\/4 hana fiori ui for general ledger accounting +1 more SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform... CVE-2020-6273 4.3 MediumAugust 12, 2020
• sap fiori, sap se fiori for sap s/4hana +1 more SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to... CVE-2020-6266 5.4 MediumJune 10, 2020
• sap fiori launchpad SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and... CVE-2020-6210 4.7 MediumMarch 10, 2020
• sap fiori client When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client... CVE-2018-2491 7.8 HighNovember 13, 2018
• sap fiori client The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori... CVE-2018-2490 7.8 HighNovember 13, 2018
• sap fiori client Locally, without any permission, an arbitrary android application could delete the SSO... CVE-2018-2489 7.8 HighNovember 13, 2018
• sap fiori client It is possible for a malware application installed on an Android device to send local push... CVE-2018-2488 7.8 HighNovember 13, 2018
• sap fiori client It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori... CVE-2018-2485 7.7 HighNovember 13, 2018
• sap fiori, fiori 1.0 for sap erp hcm (approve leave request, version 2) +1 more SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker... CVE-2018-2474 6.5 MediumOctober 9, 2018