CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level e.g., MDS...

CVE-2021-21469

Summary: CVE-2021-21469 affects SAP NetWeaver Master Data Management (MDS) on Windows. Multiple connected sources corroborate that an external operator could set custom UNC paths in the MDS server configuration, enabling an SMB relay-like attack that may lead to information disclosure. Reported a...

SAP NetWeaver Master Data Management 信息泄露漏洞

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP NetWeaver Master Data Management that could be exploited by an attacker to obtain sensitive information...

PT-2021-14537 · Sap · Sap Netweaver Master Data Management

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Master Data Management versions 7.10, 710, and 710.750 Description: The issue arises when security guidelines for SAP NetWeaver Master Data Management running on Windows have not been thoroughly reviewed. This oversight might...

KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015

KB3045318 - MS15-058: Description of the security update for SQL Server 2012 SP1 GDR: July 14, 2015 Summary This update resolves vulnerabilities in Microsoft SQL Server that could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a...

Unspecified Vulnerability in SAP Master Data Governance

SAP Master Data Governance is a suite of data management tools from SAP Germany for maintaining, validating, and distributing master data. A security vulnerability exists in SAP Master Data Governance that stems from a lack of authorization checks. An attacker could exploit the vulnerability to...

SAP Master Data Governance SQL Injection Vulnerability

SAP Master Data Governance is a suite of data management tools from SAP Germany for maintaining, validating, and distributing master data. A SQL injection vulnerability exists in SAP Master Data Governance. An attacker could exploit this vulnerability by executing specially crafted database query...

CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

Authorization

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

Sql injection

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

CVE-2020-6256

CVE-2020-6256 concerns SAP Master Data Governance, versions 748–804, where a missing authorization check allows users to display change request details without the required permissions. Connected sources (Red Hat advisory, CNVD, CVE listings, and national CERT/NCSC-style notes) consistently ident...

CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6249

The CVE-2020-6249 entry describes a SQL injection vulnerability in SAP Master Data Governance (MDG) where the admin backend report enables an attacker to craft database queries that expose the backend database. Affected components include MDG in SAP S4CORE 101, S4FND 102–104, SAP_BS_FND 748. The ...

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

CVE-2018-17789

Prospecta Master Data Online MDO allows CSRF...

Cross site request forgery (csrf)

Prospecta Master Data Online MDO allows CSRF...

CVE-2018-17789

CVE-2018-17789 affects Prospecta Master Data Online (MDO). Multiple connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability in MDO. CVSS data from NVD indicates a base score of 4.3 (CVSS2.0, MEDIUM) with network attack vector, no confidentiality impact, partial integrity impac...