Sap Xssec

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-50423 Dec 12, 02:15 PyPI CRITICAL PATCH Act Now

SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Python SAP Sap Xssec

NVD GitHub

CVSS 3.1

9.8

EPSS

1.1%

CVE-2023-49583 Dec 12, 02:15 npm CRITICAL PATCH Act Now

SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Node.js SAP Sap Xssec

NVD

CVSS 3.1

9.8

EPSS

1.1%

CVE-2023-50423 PyPI

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Privilege Escalation Python SAP +1

NVD GitHub

CVE-2023-49583 npm

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Privilege Escalation Node.js SAP +1

NVD