69 matches found
Authorization
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service...
CVE-2020-26823
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...
CVE-2020-26823
CVE-2020-26823 affects SAP Solution Manager (JAVA stack) version 7.20, with missing authorization checks in the Upgrade Diagnostics Agent Connection Service. The issue allows an unauthenticated attacker to compromise integrity and availability of the service (CVSSv3 base score 10.0, CRITICAL; vec...
CVE-2020-26821
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service...
CVE-2020-26821
CVE-2020-26821 affects SAP Solution Manager (JAVA stack) 7.20. An unauthenticated attacker can compromise the system due to missing authorization checks in the SVG Converter Service, impacting integrity and availability. Documented CVSSv3.1 base score is 10.0 (network, no privileges, no user inte...
CVE-2020-26824
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an impact to the integrity and availability of the service...
CVE-2020-26824
CVE-2020-26824 affects SAP Solution Manager (JAVA stack) version 7.20. The vulnerability is due to missing authorization checks in the Upgrade Legacy Ports Service, allowing an unauthenticated attacker to compromise the system and impacting both integrity and availability. Public disclosures in m...
CVE-2020-26822
SAP Solution Manager (JAVA stack) 7.20 is affected by CVE-2020-26822 due to missing authorization checks in the Outside Discovery Configuration Service, enabling an unauthenticated attacker to compromise the system with impact to integrity and availability. The consolidated sources (NVD entry and...
CVE-2020-26821: Missing Authentication for Critical Function
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service...
CVE-2020-26824: Missing Authentication for Critical Function
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an impact to the integrity and availability of the service...
CVE-2020-26822: Missing Authentication for Critical Function
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service...
Stack overflow
Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...
CVE-2016-6859
Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...
CVE-2016-6859
CVE-2016-6859 concerns SAP Hybris’ Hybris Management Console (HMC) prior to version 6.0. An information disclosure vulnerability allows remote attackers to trigger an error and read a Java stack trace, potentially exposing sensitive information. Affected component is the HMC within SAP Hybris; ro...
CVE-2016-6859: Exposure of Sensitive Information to an Unauthorized Actor
Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...
CVE-2016-2961
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...
CVE-2016-2961
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...
CVE-2016-2961: Exposure of Sensitive Information to an Unauthorized Actor
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...