Sap Manufacturing Execution
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_manufacturing_execution:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Manufacturing Execution (e0fed3ab-f60b-519f-8a01-bf47a935005e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39802 |
vulnerable | 2026-06-08 05:47:18.808038 |
Details available
SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.
Published: 2022-10-11T00:00:00.000Z
Updated: 2024-08-03T12:07:42.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27615 |
vulnerable | 2026-06-08 05:31:21.936339 |
Details available
MEDIUM (5.4)
SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response. The lack of these headers in response can be exploited by the attacker to execute Cross-Site Scripting (XSS) attacks.
Published: 2021-06-09T13:25:03.000Z
Updated: 2024-08-03T21:26:10.142Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.