Skip to content
OpenAdvisories

Product · SAP

CLA-Assistant

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2023-39438

    Missing Authorization check allows certain operations on CLA Assistant data

    A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by executing specific additional steps. This allows an arbitrary authenticated user to read CLA information including informati…

    SAP CLA-Assistant