Login Request a demo
SD
Product
SAP Disclosure Management.
by SAP SE · last CVE Dec 9, 2020
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SAP Disclosure Management. to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-26828
6.4
1%
Dec 9
SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type
Affected: < 10.1
CVE-2020-6290
6.3
1%
Jul 14
SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID
Affected: < 1.0
CVE-2020-6267
5.4
1%
Jul 14
Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag
Affected: < 10.1
CVE-2019-0254
5.4
1%
Feb 15
SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability
Affected: < 10.1 Stack 1301
Showing 4