Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Master Data Governance
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49058 1 Sap 1 Master Data Governance 2023-12-14 N/A 5.3 MEDIUM
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.
CVE-2020-6256 1 Sap 1 Master Data Governance 2023-12-10 4.0 MEDIUM 4.3 MEDIUM
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.