Skip to content
OpenAdvisories

Product · SAP

CLA-Assistant

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-89112

    Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure

    The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially ac…

    SAP CLA-Assistant
  • Medium 6.5
    CVE-2021-21471

    In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoint…

    SAP CLA-Assistant