Cross site scripting

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting...

CVE-2020-6303

CVE-2020-6303 concerns SAP Disclosure Management prior to version 10.1, where the web application does not properly validate certain user inputs, enabling cross-site scripting (XSS) in specific use cases. The vulnerability is tied to insufficient client-side input validation in the web layer, lea...

CVE-2020-6303

SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting...

SAP Disclosure Management CVE-2020-6303 Input Validation Security Vulnerability

Description SAP Disclosure Management is prone to a security vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to obtain sensitive information, access or modify data within the context of the affected application; this may aid in further...

Security Bulletin: IBM Cognos Disclosure Management could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document (CVE-2016-6077)

Summary A specific usage scenario of IBM Cognos Disclosure Management could allow an Excel Macro execution on the client machine. Vulnerability Details CVEID: CVE-2016-6077 DESCRIPTION: IBM Cognos Disclosure Management could allow a remote attacker to insert a specially crafted Macro inside an...

The vulnerability of the SAP Disclosure Management tool in terms of reporting capabilities is related to deficiencies in authentication procedures, which allow unauthorized users to increase their privileges.

The vulnerability of the SAP Disclosure Management reporting tool is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted request...

The vulnerability of the SAP Disclosure Management software in generating financial reports stems from the lack of protective measures for the website structure, allowing unauthorized access to protected information by attackers.

The vulnerability of the SAP Disclosure Management software for generating financial reports is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Cross site scripting

SAP Disclosure Management before version 10.1 Stack 1301 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0254

SAP Disclosure Management before version 10.1 Stack 1301 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0254

SAP Disclosure Management before version 10.1 Stack 1301 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

Authorization

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

CVE-2019-0258 affects SAP Disclosure Management, version 10.01. The vulnerability arises from insufficient authorization checks for an authenticated user, leading to privilege escalation. The public sources in the connected set describe this issue for the SAP Disclosure Management product but do ...

CVE-2019-0254

SAP Disclosure Management before version 10.1 Stack 1301 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0254

CVE-2019-0254 affects SAP Disclosure Management (before version 10.1 Stack 1301). The issue is a Cross-Site Scripting (XSS) vulnerability caused by insufficient encoding of user-controlled inputs. The root cause is failure to properly filter/encode user-submitted input, allowing a remote attacker...

SAP Disclosure Management Cross-Site Scripting Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A cross-site scripting vulnerability in SAP Disclosure Management version 10.01 Stack...

Unspecified Vulnerability in SAP Disclosure Management

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. An unspecified vulnerability exists in SAP Disclosure Management. An attacker could...

SAP Disclosure Management Arbitrary File Overwrite Vulnerability

SAP Disclosure Management is an automated financial disclosure management system. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. An arbitrary file overwrite vulnerability exists in SAP Disclosure Management, which could be...