Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_erp_defense_forces_and_public_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Erp Defense Forces And Public Security (1da5e7f3-7e11-5879-9479-3f8b40fd8d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36924 vulnerable 2026-06-08 06:08:14.707330 Log Injection vulnerability in SAP ERP Defense Forces and Public Security
MEDIUM (4.9)
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.
Published: 2023-07-11T02:57:27.493Z
Updated: 2024-10-23T16:21:35.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.