SAP SE SAP GUI for Windows
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-41205 | = 7.70 | SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attacker can gain access t | MEDIUM 6.1 | 0.2 % | ||
| CVE-2021-40503 | < 7.60 PL13 ; < 7.70 PL4 | An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with suffic | HIGH 7.8 | 0.2 % | ||
| CVE-2021-27612 | < 7.60 PL10 ; < 7.70 PL1 | In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-21448 | < 7.60 | SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client | MEDIUM 6.5 | 0.3 % |