Lucene search
+L

63 matches found

CNVD
CNVD
added 2023/04/17 12:00 a.m.42 views

SAP Landscape Management Information Disclosure Vulnerability (CNVD-2023-28117)

SAP Landscape Management is a centralized SAP product management system from SAP Germany. A security vulnerability exists in SAP Landscape Management, which can be exploited by attackers to elevate privileges...

8.4AI score0.00555EPSS
SaveExploits0
OSV
OSV
added 2023/04/11 3:15 a.m.11 views

CVE-2023-26458

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

8.7CVSS6.7AI score0.00555EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/11 3:15 a.m.31 views

Information disclosure

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

4.7CVSS8AI score0.00555EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/11 2:34 a.m.11 views

CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

6.8CVSS6.4AI score0.00555EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/11 2:34 a.m.53 views

CVE-2023-26458

The CVE affects SAP Landscape Management (enterprise edition) 3.0. An authenticated SAP Landscape Management user can access the Diagnostics Agent connection via Java SCS Message Server on a Solution Manager system and escalate to obtain privileged access on other systems, leading to information ...

8.7CVSS7.3AI score0.00555EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/11 2:34 a.m.46 views

CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

6.8CVSS8.3AI score0.00555EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.14 views

SAP Landscape Management 安全漏洞

SAP Landscape Management is a centralized SAP product management system from SAP Germany. A security vulnerability exists in SAP Landscape Management, which can be exploited by attackers to elevate privileges...

8.7CVSS6.7AI score0.00555EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.9 views

The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions, due to deficiencies in access control, allows attackers to elevate their privileges to the root level.

The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

9CVSS7.2AI score0.01236EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
added 2020/04/15 12:00 a.m.15 views

SAP Landscape Management Elevation of Privilege Vulnerability

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. A security vulnerability exists in SAP Landscape Management version 3.0 and SAP...

7.2CVSS7.1AI score0.01236EPSS
SaveExploits0
NVD
NVD
added 2020/04/14 7:15 p.m.23 views

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

7.2CVSS7.2AI score0.01236EPSS
SaveExploits0References2
OSV
OSV
added 2020/04/14 7:15 p.m.11 views

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

7.2CVSS7.3AI score0.01236EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/14 7:15 p.m.23 views

Privilege escalation

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

6.5CVSS7.1AI score0.01236EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2020/04/14 7:15 p.m.4 views

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

7.2CVSS7.7AI score0.01236EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2020/04/14 6:38 p.m.29 views

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

7.2CVSS7.2AI score0.01236EPSS
SaveExploits0References2
CVE
CVE
added 2020/04/14 6:38 p.m.56 views

CVE-2020-6236

CVE-2020-6236 affects SAP Landscape Management v3.0 and SAP Adaptive Extensions v1.0. An attacker with admin_group privileges can remotely change ownership and permissions (including S-user ID bit) of arbitrary files, enabling execution of those files as root from a non-root context and causing p...

7.2CVSS7.2AI score0.01236EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2020/03/09 12:00 a.m.7 views

SAP Landscape Management Input Validation Error Vulnerability (CNVD-2020-18534)

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. An input validation error vulnerability exists in SAP Landscape Management version...

9CVSS7.7AI score0.01579EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/09 12:00 a.m.7 views

SAP Landscape Management Input Validation Error Vulnerability

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. An input validation error vulnerability exists in SAP Landscape Management. An...

9CVSS7.7AI score0.01718EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/12 8:15 p.m.26 views

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

9CVSS7.1AI score0.01579EPSS
SaveExploits0References2
NVD
NVD
added 2020/02/12 8:15 p.m.29 views

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

9CVSS7.2AI score0.01718EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/12 8:15 p.m.11 views

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

7.2CVSS5.9AI score0.01579EPSS
SaveExploits0References2
Rows per page
Query Builder