<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: access control</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-39801: SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter se</title><link>https://patchthecve.com/cve/CVE-2022-39801.html</link><guid>https://patchthecve.com/cve/CVE-2022-39801.html</guid><pubDate>Wed, 17 Jun 2026 04:58:20 +0000</pubDate><description>HIGH 7.5: SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and com</description></item><item><title>CVE-2017-20040: A vulnerability was found in SICUNET Access Controller 0.32-05z</title><link>https://patchthecve.com/cve/CVE-2017-20040.html</link><guid>https://patchthecve.com/cve/CVE-2017-20040.html</guid><pubDate>Wed, 17 Jun 2026 01:14:58 +0000</pubDate><description>MEDIUM 5.9: A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component Password Storage. The manipulation leads to weak encryption. Attacking locally is a requirement.</description></item><item><title>CVE-2017-20039: A vulnerability was found in SICUNET Access Controller 0.32-05z</title><link>https://patchthecve.com/cve/CVE-2017-20039.html</link><guid>https://patchthecve.com/cve/CVE-2017-20039.html</guid><pubDate>Wed, 17 Jun 2026 01:14:58 +0000</pubDate><description>CRITICAL 9.8: A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely.</description></item><item><title>CVE-2017-20038: A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical</title><link>https://patchthecve.com/cve/CVE-2017-20038.html</link><guid>https://patchthecve.com/cve/CVE-2017-20038.html</guid><pubDate>Wed, 17 Jun 2026 01:14:58 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely.</description></item><item><title>CVE-2017-20037: A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical</title><link>https://patchthecve.com/cve/CVE-2017-20037.html</link><guid>https://patchthecve.com/cve/CVE-2017-20037.html</guid><pubDate>Wed, 17 Jun 2026 01:14:58 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely.</description></item><item><title>CVE-2021-44233: SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization ch</title><link>https://patchthecve.com/cve/CVE-2021-44233.html</link><guid>https://patchthecve.com/cve/CVE-2021-44233.html</guid><pubDate>Wed, 17 Jun 2026 04:12:06 +0000</pubDate><description>HIGH 8.8: SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.</description></item></channel></rss>