sap Application Interface Framework (ODATA service) vulnerabilities

Latest sap Application Interface Framework (ODATA service) CVEs

Newest publication first

1. CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

   Published 2023-04-11

   Medium·CVSS 4.3 EPSS 0.41%

   The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the applica...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.