SAP SuccessFactors Mobile 8.0.5 for iPhone OS
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:successfactors_mobile:8.0.5:*:*:*:*:iphone_os:*:*
part: a version: 8.0.5 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Successfactors Mobile (82208b90-8d86-5632-bc2b-e7f69cbd7371) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | iphone_os |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35291 |
vulnerable | 2026-06-08 05:46:04.538905 |
Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)
HIGH (8.1)
Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, EC Workflow, and Benefits. On successful exploitation, the attacker can read/write attachments. Thus, compromising the confidentiality and integrity of the application
Published: 2022-07-27T13:30:02.000Z
Updated: 2024-08-03T09:36:43.436Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.