Diary & Availability Calendar Security Vulnerabilities
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on...
4.3CVSS
6.6AI Score
0.0004EPSS
Due to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject malicious JavaScript code into the dynamically crafted web page. On successful exploitation the attacker can access or modify.....
6.1CVSS
6.7AI Score
0.0004EPSS
Due to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject malicious JavaScript code into the dynamically crafted web page. On successful exploitation the attacker can access or modify.....
6.1CVSS
6.3AI Score
0.0004EPSS
SAP My Travel Requests does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker can upload a malicious attachment to a business trip request which will lead to a low impact on the confidentiality,...
5.5CVSS
7AI Score
0.0004EPSS
SAP My Travel Requests does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker can upload a malicious attachment to a business trip request which will lead to a low impact on the confidentiality,...
5.5CVSS
5.7AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
10CVSS
7AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
10CVSS
9.4AI Score
0.0004EPSS
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...
7CVSS
6.8AI Score
0.001EPSS
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...
7CVSS
6.7AI Score
0.001EPSS
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table' widgets in all versions up to, and including, 5.9.19....
6.5CVSS
6AI Score
0.001EPSS
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table' widgets in all versions up to, and including, 5.9.19....
6.5CVSS
5.7AI Score
0.001EPSS
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect...
6.4CVSS
6.4AI Score
0.0004EPSS
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect...
6.4CVSS
6.9AI Score
0.0004EPSS
Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15...
5.9CVSS
6AI Score
0.0004EPSS
Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15...
5.9CVSS
5.8AI Score
0.0004EPSS
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect...
6.8CVSS
6.6AI Score
0.0004EPSS
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect...
5.9CVSS
6.8AI Score
0.0004EPSS
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect...
5.9CVSS
5.7AI Score
0.0004EPSS
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect...
6.8CVSS
6.9AI Score
0.0004EPSS
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect...
6.2CVSS
7.1AI Score
0.0004EPSS
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect...
8.4CVSS
6.8AI Score
0.0004EPSS
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect...
6.2CVSS
6.5AI Score
0.0004EPSS
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect...
8.4CVSS
8.4AI Score
0.0004EPSS
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect...
5.6CVSS
6.8AI Score
0.0004EPSS
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect...
6.2CVSS
6.3AI Score
0.0004EPSS
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect...
5.6CVSS
5.5AI Score
0.0004EPSS
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect...
6.2CVSS
6.8AI Score
0.0004EPSS
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect...
7.5CVSS
7.5AI Score
0.0004EPSS
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect...
7.5CVSS
6.8AI Score
0.0004EPSS
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect...
7.5CVSS
6.8AI Score
0.0004EPSS
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect...
7.5CVSS
7.5AI Score
0.0004EPSS
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect...
3.3CVSS
6.8AI Score
0.0004EPSS
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect...
6.1CVSS
6.2AI Score
0.0004EPSS
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect...
6.1CVSS
6.8AI Score
0.0004EPSS
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect...
3.3CVSS
4AI Score
0.0004EPSS
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect...
4.1CVSS
6.8AI Score
0.0004EPSS
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect...
4.1CVSS
4.4AI Score
0.0004EPSS
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect...
4.7CVSS
4.8AI Score
0.0004EPSS
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect...
4.7CVSS
6.8AI Score
0.0004EPSS
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect...
4.7CVSS
4.8AI Score
0.0004EPSS
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect...
4.7CVSS
6.8AI Score
0.0004EPSS
7.2AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
6.5CVSS
6.6AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
6.5CVSS
7AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
10CVSS
9.5AI Score
0.0004EPSS
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager...
10CVSS
7.1AI Score
0.0004EPSS
Software: jackson-databind 2.10.0 OS: ROSA Virtualization 2.1 package_evr_string: jackson-databind-2.10.0 CVE-ID: CVE-2020-35490 BDU-ID: 2022-03804 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the org.apache.commons.dbcp2.datasources.PerUserPoolDataSource component of the Jackson-databind library.....
8.1CVSS
8.1AI Score
0.007EPSS
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...
7CVSS
7AI Score
0.001EPSS
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...
7CVSS
6.7AI Score
0.001EPSS
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on...
4.3CVSS
6.7AI Score
0.0004EPSS