Lucene search
+L

4 matches found

OSV
OSV
•added 2019/02/15 6:29 p.m.•14 views

CVE-2019-0267

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

8.8CVSS5.8AI score0.0072EPSS
SaveExploits0References3
Prion
Prion
•added 2019/02/15 6:29 p.m.•32 views

Information disclosure

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

6.8CVSS8.5AI score0.0072EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/15 12:00 a.m.•11 views

CVE-2019-0267: Cross-Site Request Forgery (CSRF)

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

8.8CVSS5.7AI score0.0072EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/02/15 12:00 a.m.•7 views

PT-2019-4570

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.0 through 15.2 Description The issue is related to the lack of Anti-XSRF tokens in the Illuminator Servlet, which could lead to cross-site request forgery XSRF attacks if data is poste...

10CVSS0.0072EPSS
SaveExploits0References7
Rows per page
Query Builder