Sap Contributor License Agreement Assistant — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Contributor License Agreement Assistant, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-39438 — CVSS 8.1 (high): A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by…
• CVE-2022-29617 — CVSS 6.5 (medium): Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the…