Vulnerabilities fixed in SAP products

🗓️ 09 Apr 2024 00:00:00Reported by NCSCType

SAP fixed vulnerabilities in NetWeaver, HANA, Fiori, and Business Objects with updates to prevent cross site scripting, denial of service, circumvention, and data access.

Reporter	Title	Published	Views	Family All 116
ATTACKERKB	CVE-2022-29613	11 May 202215:15	–	attackerkb
BDU FSTEC	The vulnerability of the “Manage Catalog Items” and “Cross-Catalog Search” components of the SAP S/4HANA software platform allows a hacker to redirect users to any arbitrary URL address.	12 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP NetWeaver AS ABAP and SAP ABAP Platform software integration platforms, related to uncontrolled resource consumption, allows attackers to trigger service failures.	18 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the “Enter Package Data” component of the SAP Group Reporting Data Collection software allows a perpetrator to enhance their privileges and compromise the integrity of the data.	18 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the User Admin Application component of the SAP NetWeaver AS for Java software, used for creating and deploying web applications, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.	18 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP Asset Accounting software for asset management and accounting involves incorrect restrictions on path names in the catalog, allowing attackers to manipulate the confidentiality, integrity, and accessibility of protected information.	22 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.	22 Apr 202400:00	–	bdu_fstec
Circl	CVE-2022-29613	11 May 202218:35	–	circl
Circl	CVE-2024-27899	27 Aug 202516:20	–	circl
CNNVD	SAP Employee Self Service 输入验证错误漏洞	10 May 202200:00	–	cnnvd