CVSS: 9.4EPSS: 0%CPEs: 15EXPL: 0CVE-2023-32113 – Information Disclosure vulnerability in SAP GUI for Windows
https://notcve.org/view.php?id=CVE-2023-32113
09 May 2023 — SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation. • https://launchpad.support.sap.com/#/notes/3320467 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 19EXPL: 0CVE-2021-40503
https://notcve.org/view.php?id=CVE-2021-40503
10 Nov 2021 — An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able to logon to the backend system the SAP GUI for Windows was connected to and launch further attacks depending on the authorizations of the user. Se presenta una vulnerabilidad de divulgación de información en SAP G... • https://launchpad.support.sap.com/#/notes/3080106 • CWE-522: Insufficiently Protected Credentials •
CVSS: 9.8EPSS: 19%CPEs: 4EXPL: 0CVE-2017-6950
https://notcve.org/view.php?id=CVE-2017-6950
23 Mar 2017 — SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions and execute arbitrary code via a crafted ABAP code, aka SAP Security Note 2407616. SAP GUI 7.2 hasta la versión 7.5 permite a atacantes remotos eludir las restricciones de política de seguridad previstas y ejecutar código arbitrario a través de un código ABAP manipulado, vulnerabilidad también conocida como SAP Security Note 2407616. • http://www.securityfocus.com/bid/96872 • CWE-732: Incorrect Permission Assignment for Critical Resource •