PT-2021-21970 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client versions 7.0, 7.70 Description: The issue allows an attacker to read sensitive data, such as credentials, from the local memory or memory dump of a victim, for example, through a social engineering attack. This could enabl...

Vulnerabilities fixed in SAP

Several vulnerabilities have been fixed in various SAP products. SAP has identified two of these vulnerabilities as urgent. The first of these two vulnerabilities is located in SAP Solution Manager and has a CVSS score of 10.0 CVE-2020-6364. A unauthenticated remote malicious agent could...

SAP Business Client Code Issue Vulnerability

SAP Business Client is a user interface client program from SAP Germany. The program supports access to multiple SAP applications from a single platform. A code issue vulnerability exists in SAP Business Client version 7.0, which arises from an uncontrolled search path element in the program. The...

CVE-2020-6244

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

CVE-2020-6244

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

Code injection

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

CVE-2020-6244

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

CVE-2020-6244

SAP Business Client 7.0 is affected by CVE-2020-6244. The issue arises from an uncontrolled search path element that allows a social-engineering attacker to place a DLL in untrusted directories, which can then be executed by the application and enable the attacker to control its behavior. Exploit...

PT-2020-19040 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client version 7.0 Description: The issue allows an attacker, after a successful social engineering attack, to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to an...

Unspecified Vulnerability in SAP Business Client

SAP Business Client is a business client software from SAP Germany. A security vulnerability exists in SAP Business Client versions 6.5 and 7.0, which can be exploited by attackers to modify the installed program...

CVE-2020-6228

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

CVE-2020-6228

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

Design/Logic Flaw

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

CVE-2020-6228

SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer...

CVE-2020-6228

CVE-2020-6228 affects SAP Business Client versions 6.5 and 7.0. The root cause is missing integrity checks that could allow an attacker under certain conditions to modify the installer. The documents do not specify exploitation status or in-the-wild activity. Impact is described as the installer ...

PT-2020-19026 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client versions 6.5, 7.0 Description: The issue is related to the lack of necessary integrity checks in the SAP Business Client, which could be exploited by an attacker under certain conditions to modify the installer...

Fixed several vulnerabilities in SAP products.

Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS SQL Injection Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data SAP reports a...

CVE-2019-11552

Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection. A proxy auto-configuration file, crafted by a lesser privileged user, may be used to execute arbitrary code at a higher privilege as the service user...

SAP Business Client Unspecified Security Vulnerability

Description SAP Business Client is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Technologies Affected SAP Business Client 6.5 Recommendations Block external acces...

SAP Business Client Information Disclosure Vulnerability

SAP Business Client is a user management interface from SAP Germany. The product provides management interfaces for different SAP business applications for managing SAP products. A security vulnerability exists in SAP Business Client version 6.5. An attacker could exploit the vulnerability to...