Sourcing

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-41273 Dec 13, 04:15 MEDIUM This Month

Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can redirect a user to a malicious website. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect SAP Sourcing Contract Lifecycle Manager

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2021-2263 Apr 22, 22:15 HIGH PATCH This Week

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Sourcing

NVD

CVSS 3.1

8.1

EPSS

1.0%

CVE-2022-41273

EPSS 0% CVSS 6.1

MEDIUM This Month

Open Redirect SAP Sourcing +1

NVD

CVE-2021-2263

EPSS 1% CVSS 8.1

HIGH PATCH This Week

Authentication Bypass Oracle Sourcing

NVD