Sap Application Interface Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Application Interface Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-21737 — CVSS 8.4 (high): In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through…
• CVE-2023-29109 — CVSS 4.4 (medium): The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D…
• CVE-2023-29110 — CVSS 3.7 (low): The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E…
• CVE-2023-29111 — CVSS 3.1 (low): The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the…