Approved changes feed: RSS · Atom

cpe:2.3:a:sap:student_life_cycle_management:807:*:*:*:*:*:*:*

part: a version: 807 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductStudent Life Cycle Management (32e942b7-89fe-58ee-becc-d59b0b3b1601)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42373 vulnerable 2026-06-08 06:43:56.546537 Missing Authorization Check in SAP Student Life Cycle Management (SLcM)
MEDIUM (4.3)
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.
Published: 2024-08-13T04:53:09.327Z
Updated: 2024-08-14T16:43:46.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34690 vulnerable 2026-06-08 06:37:34.849880 Missing Authorization check in SAP Student Life Cycle Management (SLcM)
MEDIUM (5.4)
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.
Published: 2024-06-11T02:17:13.787Z
Updated: 2024-08-02T02:59:21.880Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.