ERPNext frappe.desk.reportview.get SQL injection vulnerability

Talos Vulnerability Report TALOS-2020-1091 ERPNext frappe.desk.reportview.get SQL injection vulnerability August 18, 2020 CVE Number CVE-2020-6145 SUMMARY An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially crafted HTTP request can...

SQL Injection Vulnerability in Bu***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system Bu.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

CVE-2020-6301

SAP ERP HCM Travel Management, versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check...

CVE-2020-6301

SAP ERP HCM Travel Management, versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check...

Authorization

SAP ERP HCM Travel Management, versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check...

CVE-2020-6301

SAP ERP HCM Travel Management, versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check...

CVE-2020-6301

SAP ERP (HCM Travel Management) versions 600–608 are affected by an access control vulnerability: an authenticated but unauthorized user can read, modify, and settle trips due to a missing authorization check. This leads to privilege escalation. The available connected documents confirm the affec...

CVE-2020-6301: Missing Authorization

SAP ERP HCM Travel Management, versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check...

PT-2020-5153

Name of the Vulnerable Software and Affected Versions SAP ERP HCM Travel Management versions 600 through 608 Description The issue is related to a missing authorization check, allowing an authenticated but unauthorized attacker to read, modify, and settle trips. This can result in an escalation o...

CVE-2020-9496

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03...

endi (>=2025.1.0b3, <=2026.4.7), galaxy (>=25.0.1, <=26.1.1) +2 more potentially affected by CVE-2013-7489 via beaker (1.13.0)

beaker PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on beaker and may be impacted: - endi =2025.1.0b3, =25.0.1, =2026.3.0b2, =2025.1.0b3, =2026.5.0a1 Source cves: CVE-2013-7489 Source advisory: OSV:PYSEC-2020-216...

Oracle E-Business Suite Flaws Let Hackers Hijack Business Operations

If your business operations and security of sensitive data rely on Oracle's E-Business Suite EBS, make sure you recently updated and are running the latest available version of the software. In a report released by enterprise cybersecurity firm Onapsis and shared with The Hacker News, the firm...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

Authorization

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

CVE-2020-6268

CVE-2020-6268 affects SAP ERP EA-FINSERV versions 600–618, 800 and S4CORE versions 101–104. The issue is a Missing Authorization Check where an authenticated user can view and tamper with certain restricted data due to insufficient authorization validation. The CVE entry provides a high-level imp...

CVE-2020-6268: Missing Authorization

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

PT-2020-19063

Name of the Vulnerable Software and Affected Versions SAP ERP EA-FINSERV versions 600 through 800 SAP ERP S4CORE versions 101 through 104 Description The issue concerns a missing authorization check in the Statutory Reporting for Insurance Companies module. This allows an authenticated user to vi...

alcali (>=2018.3.4, <=3000.1.0), corgy-erp (>=0.0.1, <=1.0.7) +41 more potentially affected by CVE-2020-13254 via django (>=3.0.0, <=3.0.6)

django PYPI version =3.0.0, =2018.3.4, =0.0.1, =0.2.0, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.11.5 and more Source cves: CVE-2020-13254 Source advisory: OSV:GHSA-WPJR-J57X-WXFW...