SAP SE SAP Cloud Connector
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-33694 | < 2.0 | SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to | MEDIUM 5.9 | 0.5 % | ||
| CVE-2021-33693 | < 2.0 | SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that coul | MEDIUM 6.8 | 0.5 % | ||
| CVE-2021-33695 | < 2.0 | Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate. | CRITICAL 9.1 | 0.6 % | ||
| CVE-2021-33692 | < 2.0 | SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements suc | HIGH 7.5 | 1.2 % | ||
| CVE-2019-0247 | < 2.11.3 | SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could the | CRITICAL 9.8 | 1.3 % | ||
| CVE-2019-0246 | < 2.11.3 | SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity. | CRITICAL 9.8 | 2.7 % |