SAP Focused Run)

< 10.5

OTHER 1 CVE

< 9.7

OTHER 1 CVE

< 10.7

OTHER 1 CVE

< 10.1

OTHER 1 CVE

< 200

OTHER 1 CVE

< 300

OTHER 1 CVE

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.

MEDIUM Apr 13, 2021

CVE-2020-6369

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of the service.

HIGH Oct 20, 2020