Vulnerabilities fixed in SAP products

🗓️ 10 Dec 2024 19:34:10Reported by NCSCType

SAP fixed vulnerabilities in NetWeaver, ABAP, Web Dispatcher, Business Objects, HCM and Commerce Cloud to mitigate cross site scripting, server side request forgery, data manipulation, circumvention, code execution, and data access.

Reporter	Title	Published	Views	Family All 130
BDU FSTEC	The vulnerability of the SAP Web Dispatcher, related to incomplete filtering of special elements, allows attackers to perform cross-site scripting attacks.	17 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP NetWeaver AS ABAP and SAP ABAP Platform software integration platform, related to the manipulation of the zero pointer, allows attackers to trigger a service failure.	2 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP NetWeaver Administrator software-related to insufficient validation of requests on the server side allows a attacker to execute an SSRF attack.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for managing human capital resources in SAP Human Capital Management (HCM) lies in the absence of authentication procedures that would allow unauthorized users to increase their privileges.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP BusinessObjects Business Intelligence platform, related to the use of a signal handler for an unreachable function, allows a malicious actor to gain unauthorized access to protected information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform allows a hacker to disclose protected information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP Product Lifecycle Costing Client software lies in its uncontrolled search mechanism, which allows attackers to disclose sensitive information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java software for creating and deploying web applications allows a perpetrator to compromise the confidentiality of protected information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java software for creating and deploying web applications allows a attacker to perform an SSRF attack.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP NetWeaver AS for Java software platform, related to the leakage of information about files and directories, allows attackers to circumvent existing security restrictions.	13 Dec 202400:00	–	bdu_fstec