305 matches found
CVE-2014-8590: Undefined Security Weakness
XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...
CVE-2009-2932
Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...
CVE-2009-2932
Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...
CVE-2009-2932: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...
CVE-2007-3615: Undefined Security Weakness
Internet Communication Manager aka ICMAN.exe or ICM in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service process crash via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web...