Every CVE whose affected-product data names Sap Access Control, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2021-44233 — CVSS 8.8 (high): SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated…
CVE-2022-39801 — CVSS 7.5 (high): SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed…