CVE-2023-50424

SAP Patches Critical Vulnerabilities in December Update

SAP Patches Critical Vulnerabilities in December Update

Do Son December 12, 2023

On the 12th of December 2023, SAP Security Patch Day published 15 new Security Notes alongside updates to 2 previously released notes

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2019-25779CVSS 8.7
WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2023-54413CVSS 5.1
WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2026-81648CVSS 10.0
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
Admin intel📅 Updated: Nov 3, 2026
CVE-2026-58115CVSS 10.0
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
Admin intel📅 Updated: Nov 2, 2026
CVE-2026-20051CVSS 7.4
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2026-20118CVSS 6.8
A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2010-20125CVSS 8.7
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
Watchtower Verified📅 Updated: Oct 30, 2026
CVE-2026-111357CVSS 7.0
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
CISA KEV📅 Added to KEV: Oct 30, 2026

CVE-2024-6671CVSS 9.8
In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a...
📅 Updated: Nov 3, 2026
CVE-2024-6800CVSS 9.5
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific...
📅 Updated: Nov 3, 2026
CVE-2024-5805CVSS 9.1
Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.
📅 Updated: Nov 3, 2026
CVE-2024-6235CVSS 9.4
Sensitive information disclosure in NetScaler Console
📅 Updated: Nov 3, 2026
CVE-2024-45409CVSS 10.0
The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in
📅 Updated: Nov 3, 2026
CVE-2024-39700CVSS 10.0
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option...
📅 Updated: Nov 3, 2026
CVE-2024-3912CVSS 9.8
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this...
📅 Updated: Nov 3, 2026
CVE-2024-41730CVSS 9.8
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user...
📅 Updated: Nov 3, 2026