Lucene search
+L

63 matches found

OSV
OSV
added 2020/02/12 8:15 p.m.4 views

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

7.2CVSS5.9AI score0.01718EPSS
SaveExploits0References2
Prion
Prion
added 2020/02/12 8:15 p.m.23 views

Input validation

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

9CVSS7AI score0.01579EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/02/12 8:15 p.m.31 views

Design/Logic Flaw

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

9CVSS7.1AI score0.01718EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/12 7:46 p.m.37 views

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

7.2CVSS7.1AI score0.01579EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/12 7:46 p.m.65 views

CVE-2020-6191

CVE-2020-6191 describes a vulnerability in SAP Landscape Management 3.0 where an attacker with admin privileges can cause the SAP Host Agent to execute arbitrary code with root privileges due to Missing Input Validation. The connected sources (NVD, Red Hat, CNVD, CNVD-like entries, and related no...

9CVSS7AI score0.01579EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/12 7:45 p.m.36 views

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

7.2CVSS7.2AI score0.01718EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/12 7:45 p.m.71 views

CVE-2020-6192

CVE-2020-6192 affects SAP Landscape Management, version 3.0. The vulnerability allows an attacker with admin privileges to run malicious commands with root privileges on the SAP Host Agent via SAP Landscape Management. CNVD cites an input validation error as the underlying issue; other sources re...

9CVSS7.2AI score0.01718EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:00 a.m.12 views

The vulnerability of the SAP Landscape Management automation system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Landscape Management automation system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.6AI score0.00875EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/10/21 12:00 a.m.10 views

SAP Landscape Management Log Information Disclosure Vulnerability

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. A log information disclosure vulnerability exists in SAP Landscape Management. The...

4.9CVSS6.1AI score0.00875EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/08 8:15 p.m.9 views

CVE-2019-0380

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure...

4.9CVSS5.8AI score0.00875EPSS
SaveExploits0References2
NVD
NVD
added 2019/10/08 8:15 p.m.30 views

CVE-2019-0380

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure...

4.9CVSS5.1AI score0.00875EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/08 8:15 p.m.27 views

Information disclosure

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure...

4CVSS5.1AI score0.00875EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/10/08 7:31 p.m.59 views

CVE-2019-0380

CVE-2019-0380 affects SAP Landscape Management enterprise edition prior to 3.0. The vulnerability arises when default values of custom secure parameters are included in application logs, causing information disclosure. The description and multiple sources corroborate a log-based exposure in SAP L...

4.9CVSS5.1AI score0.00875EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/08 7:31 p.m.38 views

CVE-2019-0380

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure...

5.2AI score0.00875EPSS
SaveExploits0References2
Symantec
Symantec
added 2019/10/08 12:00 a.m.49 views

SAP Landscape Management CVE-2019-0380 Information Disclosure Vulnerability

Description SAP Landscape Management is prone to an unspecified information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. SAP Landscape Management 3.0 is vulnerable; other versions may also be affected...

0.6AI score0.00875EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/07 12:00 a.m.9 views

The vulnerability of the SAP HANA Extended Application Services application development tool in the SAP Landscape Management automation system allows a perpetrator to execute arbitrary code.

The vulnerability of the SAP HANA Extended Application Services application development tool in the SAP Landscape Management automation system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a special...

9.4CVSS8.2AI score0.03629EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2019/01/10 12:00 a.m.9 views

SAP Landscape Management Information Disclosure Vulnerability (CNVD-2019-04859)

SAP Landscape Management is a suite of business process solutions from SAP in Germany. The product is mainly used for the management of hybrid SAP environments. An information disclosure vulnerability exists in SAP Landscape Management, which can be exploited by remote attackers to access...

7.5CVSS6.3AI score0.01728EPSS
SaveExploits0References1
NVD
NVD
added 2019/01/08 8:29 p.m.30 views

CVE-2019-0249

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

7.5CVSS7.4AI score0.01728EPSS
SaveExploits0References3
OSV
OSV
added 2019/01/08 8:29 p.m.11 views

CVE-2019-0249

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

7.5CVSS5.8AI score0.01728EPSS
SaveExploits0References3
Prion
Prion
added 2019/01/08 8:29 p.m.24 views

Authentication flaw

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

5CVSS7.4AI score0.01728EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder