Lucene search
K

48 matches found

OSV
OSV
added 2021/03/09 3:15 p.m.3 views

CVE-2021-21481

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in...

8.8CVSS7.3AI score0.00562EPSS
Exploits0References2
Prion
Prion
added 2021/03/09 3:15 p.m.23 views

Authorization

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in...

8.3CVSS8.5AI score0.00562EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/09 2:5 p.m.13 views

CVE-2021-21481

The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in...

9.6CVSS8.8AI score0.00562EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.6 views

SAP Netweaver 安全漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50, which...

9.6CVSS5.5AI score0.00562EPSS
Exploits0References4
OSV
OSV
added 2016/04/07 10:59 a.m.5 views

CVE-2016-0888

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...

8.8CVSS5.8AI score0.03107EPSS
Exploits0References2
Prion
Prion
added 2016/04/07 10:59 a.m.14 views

Design/Logic Flaw

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...

9CVSS6.8AI score0.03107EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/04/07 10:0 a.m.22 views

CVE-2016-0888

EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...

8.4AI score0.03107EPSS
Exploits0References2
CNVD
CNVD
added 2016/04/06 12:0 a.m.8 views

EMC Documentum D2 Unauthorized Operation Vulnerability

EMC Documentum D2 is the advanced, intuitive, configurable and content-centric Documentum client that accelerates adoption of ECM applications. Multiple D2 Configuration object types in EMC Documentum D2 versions prior to 4.6 fail to properly use ACLs, which can be exploited by an authenticated,...

9CVSS6.8AI score0.03107EPSS
Exploits0References1
Rows per page
Query Builder