SAP Plant Connectivity 15.5
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:plant_connectivity:15.5:*:*:*:*:*:*:*
part: a version: 15.5 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Plant Connectivity (f2fac5e0-fbde-56aa-867b-976c9334f816) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2827 |
vulnerable | 2026-06-08 06:02:43.148744 |
Missing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital
HIGH (7.9)
SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.
Published: 2023-06-13T02:36:18.158Z
Updated: 2025-01-03T02:07:52.209Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.