CVE-2021-33673

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting XSS vulnerability when a user browses through the employee directory and to execute arbitrary code ...

CVE-2021-33674

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting XSS vulnerability when creating a new email and to execute arbitrary code on the victim's browser...

Cross site scripting

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting XSS vulnerability through phishing and to execute arbitrary code on the victim's browser...

Design/Logic Flaw

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the...

Cross site scripting

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting XSS vulnerability when a user browses through the employee directory and to execute arbitrary code ...

CVE-2021-33674

CVE-2021-33674 affects SAP Contact Center, version 700. The issue arises because user-controlled inputs are not sufficiently encoded, allowing a reflected XSS when creating a new email, potentially enabling arbitrary code execution in the victim’s browser. Exploitation details are not provided in...

CVE-2021-33672

CVE-2021-33672 affects SAP Contact Center’s Communication Desktop component (v700). The vulnerability arises from missing encoding, allowing an attacker to send a malicious script in a chat message. Once the recipient accepts the message, the script executes in their context; due to ActiveX usage...

CVE-2021-33675

CVE-2021-33675 concerns SAP Contact Center, version 700, where input from users is not properly encoded, enabling a reflected XSS vulnerability that could allow an attacker to execute arbitrary code in the victim’s browser via phishing. The underlying issue is insufficient encoding of user-contro...

CVE-2021-33675

Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting XSS vulnerability through phishing and to execute arbitrary code on the victim's browser...

CVE-2021-33673

CVE-2021-33673 affects SAP Contact Center (version 700). The vulnerability is a Stored XSS flaw caused by insufficient encoding of user-controlled inputs in the employee directory, with the attack chain potentially enabling arbitrary code execution in the victim’s browser. The issue is aggravated...

CVE-2021-33673

Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting XSS vulnerability when a user browses through the employee directory and to execute arbitrary code ...

SAP Contact Center 安全漏洞

SAP Contact Center is a new cloud service from SAP that is built on top of SAP's on-premise contact center software, putting modern contact center solutions at the agent's fingertips. A cross-site scripting vulnerability exists in SAP Contact Center 700. The vulnerability stems from the program n...

Design/Logic Flaw

A function module of SAP NetWeaver AS ABAP Reconciliation Framework, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some...

SAP CRM 安全漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A security vulnerability exists in SAP CRM ABAP, which stems from a lack of authorization checks in the product. The following products and versions are affected: SAP CRM, Versions - 700, 701, 702, 712, 713, 714...

SAP NetWeaver AS ABAP 代码注入漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS ABAP, which originates from a code injection in the product. The following products and versions a...

CVE-2021-21473

CVE-2021-21473 affects SAP NetWeaver AS ABAP and ABAP Platform versions 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755. The issue is in function module SRM_RFC_SUBMIT_REPORT which fails to validate authorization of an authenticated user, allowing an unauthorized user to execute r...

PT-2021-14556 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP Web Survey versions 700 through 75F Description: The issue arises from insufficient encoding of input and output parameters, leading to a reflected cross-site scripting vulnerability. This allows a malicious user to...

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

SAP NetWeaver AS ABAP Business Server 代码注入漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

Play Store apps plagued with malware have 700,000 downloads

By Deeba Ahmed Another day, another Android malware found in apps downloaded more than half a million times from Google Play Store. This is a post from HackRead.com Read the original post: Play Store apps plagued with malware have 700,000 downloads...