rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-2390 
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2391 
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS portwatcher service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2392 
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
Problem types: description: Missing XML Validation
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2393 
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
Problem types: description: Missing XML Validation
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2394 
Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2395 
Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing image or corrupt other type of files.
Problem types: description: Unrestricted File Upload
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2396 
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, using IGS Interpreter service.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2397 
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: SAP SE
product: SAP Business Objects Business Intelligence Platform
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2398 
Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Business Client
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2399 
Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of user controlled inputs.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Process Monitoring Infrastructure
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2400 
Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2401 
SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.
Problem types: description: XML External Entity
Affected products: vendor: SAP SE
product: SAP Business Process Automation (BPA) By Redwood
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2402 
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay), user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorizations on the control system may be able to access the user credentials and gain unauthorized access to data in the captured or target system.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2403 
Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Disclosure Management
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2404 
SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.
Problem types: description: Unrestricted File Upload
Affected products: vendor: SAP SE
product: SAP Disclosure Management
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2405 
SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Solution Manager
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2406 
Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
Problem types: description: Directory/Path Traversal
Affected products: vendor: SAP SE
product: SAP Crystal Reports Server, OEM Edition
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2408 
Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created using older password continues to be active.
Problem types: description: Other
Affected products: vendor: SAP SE
product: SAP Business Objects
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2409 
Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.
Problem types: description: Other
Affected products: vendor: SAP SE
product: SAP Cloud Platform Connector
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2410 
SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Business One
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2412 
SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP Disclosure Management
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2413 
SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP Disclosure Management
Published: 2018-04-10T15:00:00.000Z
CVE-2018-2415 
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently encode user controlled inputs, resulting in a content spoofing vulnerability when error pages are displayed.
Problem types: description: Content Spoofing
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server (Engine API)
vendor: SAP SE
product: SAP NetWeaver Application Server (J2EE Engine Server Core)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2416 
SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.
Problem types: description: Missing XML Validation
Affected products: vendor: SAP
product: SAP Identity Management
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2417 
Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Identity Management
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2418 
SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP MaxDB ODBC driver
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2419 
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP Enterprise Financial Services (SAPSCORE)
vendor: SAP SE
product: SAP Enterprise Financial Services (S4CORE)
vendor: SAP SE
product: SAP Enterprise Financial Services (EA-FINSERV)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2420 
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.
Problem types: description: Unrestricted File Upload
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server (IGS)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2421 
SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server (IGS)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2422 
SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server (IGS)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2423 
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server (IGS)
Published: 2018-05-09T20:00:00.000Z
CVE-2018-2424 
SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP HANA Database
vendor: SAP SE
product: SAP UI5
vendor: SAP SE
product: SAP UI5(Java)
vendor: SAP SE
product: SAP UI
vendor: SAP SE
product: SAP UI for SAP NetWeaver 7.00
Published: 2018-06-12T15:00:00.000Z
CVE-2018-2425 
Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Business One
Published: 2018-06-12T15:00:00.000Z
CVE-2018-2427 
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence Suite
vendor: SAP
product: SAP Crystal Reports
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2428 
Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Infrastructure
vendor: SAP SE
product: SAP UI
vendor: SAP SE
product: SAP UI for SAP NetWeaver 7.00
Published: 2018-06-12T15:00:00.000Z
CVE-2018-2431 
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence Suite
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2432 
SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking.
Problem types: description: Header Manipulation
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2433 
SAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.53) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial of Service
Affected products: vendor: SAP
product: SAP Gateway
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2434 
A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver (UI_Infra, 1.0), SAP UI Implementation for Decoupled Innovations (UI_700, 2.0): SAP NetWeaver 7.00 Implementation, SAP User Interface Technology (SAP_UI 7.4, 7.5, 7.51, 7.52). There is little impact as it is not possible to embed active contents such as JavaScript or hyperlinks.
Problem types: description: Content Spoofing
Affected products: vendor: SAP
product: SAP NetWeaver (UI_Infra)
vendor: SAP
product: SAP UI Implementation for Decoupled Innovations (UI_700)
vendor: SAP
product: SAP NetWeaver
vendor: SAP
product: SAP User Interface Technology (SAP_UI)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2435 
SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP
product: SAP NetWeaver Enterprise Portal
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2436 
Executing transaction WRCK in SAP R/3 Enterprise Retail (EHP6) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authentication
Affected products: vendor: SAP
product: SAP R/3 Enterprise Retail
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2437 
The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.
Problem types: description: Disclosure of information and malicious file insertion or modification.
Affected products: vendor: SAP
product: SAP Internet Graphics Server (IGS)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2438 
The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of-service vulnerabilities that allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial of Service
Affected products: vendor: SAP
product: SAP Internet Graphics Server (IGS)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2439 
The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server (IGS) did not require sufficient input validation. Namely, the SAP Internet Graphics Server (IGS) HTTP and RFC listener, SAP Internet Graphics Server (IGS) portwatcher when registering a portwatcher to the multiplexer and the SAP Internet Graphics Server (IGS) multiplexer had insufficient input validation and thus allowing a malformed data packet to cause a crash.
Problem types: description: Code Injection
Affected products: vendor: SAP
product: SAP Internet Graphics Server (IGS)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2440 
Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7 and 8.5) exposes sensitive information in the application logs.
Problem types: description: Information Disclosure
Affected products: vendor: SAP
product: SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions)
Published: 2018-07-10T18:00:00.000Z
CVE-2018-2441 
Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP
product: SAP Change and Transport System (ABAP)
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2442 
In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2444 
SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP
product: SAP BusinessObjects Financial Consolidation
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2445 
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.
Problem types: description: Server-Side Request Forgery
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence Platform
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2446 
Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2447 
SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.
Problem types: description: SQL Injection
Affected products: vendor: SAP
product: SAP BusinessObjects Business Intelligence
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2448 
Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP
product: SAP SRM-MDM CATALOG
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2449 
SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying.
Problem types: description: Missing Authentication
Affected products: vendor: SAP
product: SAP Supplier Relationship Management Master Data Management Catalog
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2450 
SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database.
Problem types: description: SQL Injection
Affected products: vendor: SAP
product: SAP MaxDB (liveCache)
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2451 
XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed.
Problem types: description: Other
Affected products: vendor: SAP
product: SAP HANA Extended Application Services
Published: 2018-08-14T16:00:00.000Z
CVE-2018-2452 
The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP
product: SAP NetWeaver AS Java
Published: 2018-09-11T15:00:00.000Z
CVE-2018-2454 
SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_2) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization
Affected products: vendor: SAP
product: SAP Enterprise Financial Services
Published: 2018-09-11T15:00:00.000Z
CVE-2018-2455 
SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization
Affected products: vendor: SAP
product: SAP Enterprise Financial Services
Published: 2018-09-11T15:00:00.000Z