Approved changes feed: RSS · Atom

cpe:2.3:a:sap:master_data_governance:802:*:*:*:*:*:*:*

part: a version: 802 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductMaster Data Governance (d22c0d63-c93b-54dd-8e6b-3e8419218f80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49058 vulnerable 2026-06-08 06:14:28.361168 Directory Traversal vulnerability in SAP Master Data Governance
LOW (3.5)
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.
Published: 2023-12-12T01:01:07.964Z
Updated: 2024-08-02T21:46:29.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6256 vulnerable 2026-06-08 05:26:44.928028 Details available
MEDIUM (5.4)
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
Published: 2020-05-12T17:51:22.000Z
Updated: 2024-08-04T08:55:22.211Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.