Vulnerabilities fixed in SAP products

🗓️ 09 Mar 2021 00:00:00Reported by NCSCType

SAP fixed vulnerabilities enabling cross site forgery, authentication bypass, security bypass, and remote code execution.

Reporter	Title	Published	Views	Family All 259
0day.today	SAP Solution Manager 7.2 Remote Command Execution Exploit	26 Mar 202100:00	–	zdt
GithubExploit	Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform	30 Dec 202003:08	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform	27 Dec 202010:37	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform	24 Aug 202108:36	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Sap Solution_Manager	14 Jan 202110:49	–	githubexploit
ATTACKERKB	CVE-2020-6207	10 Mar 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the User Experience Monitoring component of the SAP Solution Manager platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The software’s vulnerability regarding increasing the effective working time of components and equipment, as well as optimizing resource utilization in the SAP 3D Visual Enterprise Viewer, arises from writing data beyond the buffer in memory when processing PSD files. This vulnerability allows attackers to cause the application to crash.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the component allows for the creation, design, configuration, and display of information panels within the Self Service Composition Environment (SSCE) of the SAP Manufacturing Integration and Intelligence platform. This vulnerability enables a perpetrator to execute arbitrary code or escalate their privileges.	6 Jul 202200:00	–	bdu_fstec
Circl	CVE-2020-6207	15 Jan 202103:33	–	circl