Approved changes feed: RSS · Atom

cpe:2.3:a:sap:business_client:7.0:patch_level8:*:*:*:*:*:*

part: a version: 7.0 update: patch_level8

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusiness Client (500ce621-3a4d-5dcb-aef4-b4f5c371fcc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38150 vulnerable 2026-06-08 05:32:55.539812 Details available
MEDIUM (6.1)
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.
Published: 2021-09-14T11:14:59.000Z
Updated: 2024-08-04T01:37:16.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6244 vulnerable 2026-06-08 05:26:44.898610 Details available
HIGH (7)
SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the application.
Published: 2020-05-12T17:54:36.000Z
Updated: 2024-08-04T08:55:22.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.