Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1 security update

An update for atomic-openshift is now available for Red Hat OpenShift Enterprise 3.1. In addition, all images have been rebuilt on the new RHEL 7.2.4 base image. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

Schneider AS AS-P系列-v1.7及之前版本-权限绕过漏洞

No description provided by source...

Design/Logic Flaw

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4014

The CVE-2016-4014 entry concerns an XXE/XEE vulnerability in the SAP NetWeaver AS JAVA UDDI component (SAP NetWeaver JAVA AS 7.4). The root cause is XML External Entity processing allowing a crafted DTD to cause denial of service by making the server hang when processing requests to uddi/api/repl...

CVE-2016-4015

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4015

CVE-2016-4015 is a DoS vulnerability in the SAP NetWeaver JAVA AS Enqueue Server. A crafted request in Enqueue Server (affecting SAP NetWeaver Enqueue Server 7.4 and likely earlier 7.1–7.4) can crash the process, enabling remote attackers to deny service. The issue is documented with SAP Security...

PT-2016-1706

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS 7.4 Description The issue is related to an XML external entity XXE vulnerability in the UDDI component, which is caused by incorrect restriction of XML links to external objects. This can be exploited by a remote attacker...

PT-2016-1705

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS versions 7.1 through 7.4 Description The issue is related to errors in the code of the Enqueue Server component in SAP NetWeaver. It allows remote attackers to cause a denial of service, specifically a process crash, via ...

CVE-2016-4015: Undefined Security Weakness

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4014: Undefined Security Weakness

XML external entity XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service system hang via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389...

Schneider AS AS-P系列-v1.7及之前版本管理账户-弱口令漏洞

No description provided by source...

CVE-2016-3980

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3979

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

Memory corruption

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

CVE-2016-3979

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

CVE-2016-3980

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3979

CVE-2016-3979 (SAP NetWeaver AS JAVA ICM/ICM) : A denial-of-service vulnerability in the Internet Communication Manager (ICMAN/ICM) component affects SAP NetWeaver AS JAVA 7.2–7.4. According to connected sources, a remote attacker can cause a heap memory corruption and process crash by sending a ...

CVE-2016-3980

CVE-2016-3980 : In SAP NetWeaver AS JAVA (7.2–7.4), the Java Startup Framework (jstart) is vulnerable to a remote denial-of-service via a crafted HTTP request. The issue originates from the startup framework component in SAP NetWeaver AS JAVA 7.4 (and likely 7.2–7.4 variants) and is documented as...

CVE-2015-8840

Affected component: SAP NetWeaver AS Java — XML DAS (XML Data Archiving Service). Vulnerability summary: The XML DAS service does not perform authorization checks, enabling remote authenticated users to obtain sensitive information, and potentially gain privileges or cause other impact through re...

PT-2016-5790

Name of the Vulnerable Software and Affected Versions SAP JAVA AS versions 7.2 through 7.4 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via a crafted HTTP request. Recommendations For SAP JAVA AS versions 7.2 through 7.4, update to a...