Description
Elements of PDCE does not perform necessary
authorization checks for an authenticated user, resulting in escalation of
privileges.
This
allows an attacker to read sensitive information causing high impact on the
confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP PDCE | S4CORE 102, S4CORE 103, S4COREOP 104, S4COREOP 105, S4COREOP 106, S4COREOP 107, S4COREOP 108 | — |
Advisories 6
- WID-SEC-2025-1002 SAP Patchday Mai 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2025
- NCSC-2025-0149 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · May 13, 2025
- NCSC-2025-0076 Kwetsbaarheden verholpen in SAP software NCSC-NL (Netherlands) · Mar 11, 2025
- WID-SEC-2025-0521 SAP Patchday März 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2025
- WID-SEC-2024-3407 SAP Patchday November 2024: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- WID-SEC-2024-3093 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2024