CVE-2026-58242Low 3.5Improper Authorization check in SAP Cloud Connector0.2%
CVE-2025-42955Low 3.5Missing authorization check in SAP Cloud Connector0.5%
CVE-2024-25642High 7.4Improper Certificate Validation in SAP Cloud Connector0.5%
CVE-2023-49578Low 3.5Denial of service (DOS) in SAP Cloud Connector0.3%
CVE-2021-33694Medium 5.9SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and0.5%
CVE-2021-33693Medium 5.7SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution.0.5%
CVE-2021-33695Medium 6.8Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.0.6%
CVE-2021-33692Medium 5.2SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outsid1.2%