Lucene search
K

4 matches found

OSV
OSV
added 2023/04/11 3:15 a.m.1 views

CVE-2023-27497

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely...

9.8CVSS6.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/04/11 2:37 a.m.4 views

CVE-2023-27497 Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely...

10CVSS7.5AI score0.00353EPSS
Exploits0References2
CVE
CVE
added 2023/04/11 2:37 a.m.54 views

CVE-2023-27497

CVE-2023-27497 affects SAP Diagnostics Agent version 720, where the EventLogServiceCollector is vulnerable due to missing authentication and input sanitization. This allows an attacker to execute malicious scripts on all connected Diagnostics Agents on Windows, potentially compromising confidenti...

10CVSS9.8AI score0.00353EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/11 2:37 a.m.15 views

CVE-2023-27497 Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely...

10CVSS9.9AI score0.00353EPSS
Exploits0References2
Rows per page
Query Builder