Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Host Agent
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-6234 1 Sap 1 Host Agent 2022-04-29 6.5 MEDIUM 7.2 HIGH
SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.
CVE-2020-6186 1 Sap 1 Host Agent 2020-02-19 5.0 MEDIUM 7.5 HIGH
SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of Service.
CVE-2017-15297 1 Sap 1 Host Agent 2018-12-10 5.0 MEDIUM 7.5 HIGH
SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.