📦 S4core

This CVE describes a SQL injection vulnerability in SAP's DMIS Mobile Plug-In and S/4HANA systems that allows attackers with privileged account access to execute arbitrary SQL queries through the NDZT...

CVE-2024-39592 is an authorization bypass vulnerability in SAP PDCE (Product Data Cloud Edition) that allows authenticated users to escalate privileges and access sensitive information. This affects S...

This CVE describes a reflected cross-site scripting (XSS) vulnerability in BSP applications where unauthenticated attackers can inject malicious scripts via URL parameters. When victims click crafted ...

This vulnerability in SAP Fiori App Manage Service Entry Sheets allows authenticated users to perform unauthorized actions due to missing authorization checks, leading to privilege escalation. It affe...

This CVE describes an unvalidated redirect vulnerability in BSP applications where unauthenticated attackers can manipulate URL parameters to redirect users to malicious websites. This affects systems...