Gui

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-41205 Nov 08, 22:15 MEDIUM This Month

SAP GUI allows an authenticated attacker to execute scripts in the local network. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

RCE SAP Code Injection Gui

NVD VulDB

CVSS 3.1

6.1

EPSS

0.2%

CVE-2015-2282 Jun 02, 14:59 HIGH POC This Week

Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service SAP Maxdb +5

NVD

CVSS 2.0

7.5

EPSS

0.9%

CVE-2015-2278 Jun 02, 14:59 MEDIUM POC This Month

The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service SAP Maxdb Rfc Library +4

NVD

CVSS 2.0

5.0

EPSS

0.7%

CVE-2022-41205

EPSS 0% CVSS 6.1

MEDIUM This Month

SAP GUI allows an authenticated attacker to execute scripts in the local network. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

RCE SAP Code Injection +1

NVD VulDB

CVE-2015-2282

EPSS 1% CVSS 7.5

HIGH POC This Week

RCE Buffer Overflow Denial Of Service +7

NVD

CVE-2015-2278

EPSS 1% CVSS 5.0

MEDIUM POC This Month

Buffer Overflow Denial Of Service SAP +6

NVD