Vulnerabilities fixed in SAP products

🗓️ 11 Jun 2024 12:37:09Reported by NCSCType

SAP fixed vulnerabilities in Business Objects, HANA, CRM and NetWeaver, patching DoS, authentication bypass, cross site scripting and sensitive data access.

Reporter	Title	Published	Views	Family All 91
BDU FSTEC	The vulnerability of the “Manage Incoming Payment Files” component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.	5 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Transformation and Data Transfer Process (DTP) in the SAP BW/4HANA data management and analytics system allows attackers to enhance their privileges.	8 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP Document Builder in creating and managing documents allows for unlimited uploading of sensitive files, enabling an attacker to gain access to read, modify, or delete data.	8 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Meta Model Repository component of the SAP NetWeaver AS for Java software used for creating and deploying web applications allows a attacker to cause a service failure.	8 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the student lifecycle management system in higher education institutions, SAP Student Life Cycle Management (SLcM), is related to deficiencies in the authentication process, which allow unauthorized users to elevate their privileges.	8 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms, related to uncontrolled resource consumption, allows attackers to trigger service failures.	8 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP Financial Consolidation web application stems from insufficient protection of the web page structure, allowing attackers to carry out cross-site scripting attacks.	8 Jul 202400:00	–	bdu_fstec
CNNVD	SAP BW/4HANA Security Vulnerabilities	11 Jun 202400:00	–	cnnvd
CNNVD	SAP NetWeaver AS Resource Management Error Vulnerability	11 Jun 202400:00	–	cnnvd
CNNVD	SAP Student Life Cycle Management Security Vulnerability	11 Jun 202400:00	–	cnnvd