Lucene search
K

5 matches found

Vulnrichment
Vulnrichment
added 2025/10/14 12:17 a.m.2 views

CVE-2025-42903 User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management

A vulnerability in SAP Financial Service Claims Management RFC function ICLUSERGETNAMEANDADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability...

4.3CVSS6.3AI score0.00306EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

SAP Financial Service Claims Management 安全漏洞

SAP Financial Service Claims Management is a financial services web platform from SAP, Germany. A security vulnerability exists in SAP Financial Service Claims Management that stems from a response discrepancy in the ICLUSERGETNAMEANDADDRESS RFC function, which could lead to user enumeration and...

4.3CVSS6.5AI score0.00306EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/18 12:0 a.m.2 views

itsourcecode Online Petshop Management System 安全漏洞

itsourcecode Online Petshop Management System is itsourcecode open source an online pet store management system. A security vulnerability exists in version 1.0 of itsourcecode Online Petshop Management System, which stems from an incorrect manipulation of the name or address parameter in the file...

5.4CVSS4.3AI score0.00256EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/01/13 12:0 a.m.2 views

Online FIR System Cross-Site Scripting Vulnerability

Online FIR System is an online complaint platform. A cross-site scripting vulnerability exists in code-projects Online FIR System version 1.0, which stems from a cross-site scripting vulnerability in the Name/Address parameter of the registercomplaint.php file...

6.1CVSS6.2AI score0.00566EPSS
Exploits1References4
Prion
Prion
added 2021/08/19 2:39 p.m.12 views

Cross site scripting

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

3.5CVSS5.5AI score0.00932EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder