Vulnerabilities fixed in SAP products

🗓️ 13 Aug 2024 13:47:02Reported by NCSCType

SAP fixed vulnerabilities in SAP Business Objects, SAP HANA, Netweaver and Document Builder; risks include SSRF, XSS, authentication bypass, data manipulation, and data access.

Reporter	Title	Published	Views	Family All 2037
vulnersosv	openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2023-0215 via openssl-src (=110.0.7+1.1.0i)	8 Feb 202322:28	–	vulnersosv
vulnersosv	roaring-landmask (=0.4.0) potentially affected by CVE-2022-0778 via openssl-src (=300.0.0+3.0.0)	16 Mar 202200:00	–	vulnersosv
vulnersosv	roaring-landmask (=0.4.0) potentially affected by CVE-2023-0215 via openssl-src (=300.0.0+3.0.0)	7 Feb 202312:00	–	vulnersosv
vulnersosv	roaring-landmask (=0.4.0) potentially affected by CVE-2022-0778 via openssl-src (=300.0.0+3.0.0)	15 Mar 202212:00	–	vulnersosv
vulnersosv	roaring-landmask (=0.4.0) potentially affected by CVE-2023-0286 via openssl-src (=300.0.0+3.0.0)	8 Feb 202322:17	–	vulnersosv
vulnersosv	org.webjars.npm:bonjour (=3.5.0), org.webjars.npm:dns-packet (>=1.3.1 <=4.2.0) +10 more potentially affected by CVE-2024-29415 +1 more via org.webjars.npm:ip (>=1.1.5 <=2.0.0)	16 Sep 202502:44	–	vulnersosv
vulnersosv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 007-nodejs (>=2.5.0 <=2.5.3) +46037 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1 <=2.0.1)	16 Sep 202502:44	–	vulnersosv
vulnersosv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 007-nodejs (>=2.5.0 <=2.5.3) +46037 more potentially affected by CVE-2024-29415 via ip (>=0.0.1 <=2.0.1)	2 Jun 202422:29	–	vulnersosv
vulnersosv	roaring-landmask (=0.4.0) potentially affected by CVE-2023-0286 via openssl-src (=300.0.0+3.0.0)	7 Feb 202312:00	–	vulnersosv
vulnersosv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 007-nodejs (>=2.5.0 <=2.5.3) +46037 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1 <=2.0.1)	16 Sep 202502:44	–	vulnersosv