Approved changes feed: RSS · Atom

cpe:2.3:a:sap:disclosure_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductDisclosure Management (5fc029e3-208c-58ab-907f-8f6b9dde664a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41274 vulnerable 2026-06-08 05:48:30.121946 Details available
MEDIUM (6.5)
SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports.
Published: 2022-12-13T03:11:53.200Z
Updated: 2025-04-22T02:51:36.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6303 vulnerable 2026-06-08 05:26:45.051681 Details available
MEDIUM (5.4)
SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.
Published: 2020-01-14T17:52:59.000Z
Updated: 2024-08-04T08:55:22.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0254 vulnerable 2026-06-08 05:12:19.519334 Details available
SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-02-15T18:00:00.000Z
Updated: 2024-08-04T17:44:16.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.