SAP NetWeaver Process Integration Information Disclosure Vulnerability (CNVD-2019-09637)

SAP NetWeaver is a service-oriented application and integration platform for SAP applications to provide a development and runtime environment can also be used and other applications and systems for custom development and integration. An information disclosure vulnerability exists in SAP NetWeave...

CVE-2019-0283: Authentication Bypass by Spoofing

SAP NetWeaver Process Integration Adapter Engine, fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing. It is possible to spoof XML signatures and send arbitrary requests to the server via PI Axis adapter. These requests will be accepted by the PI Ax...

CVE-2019-0282: Improper Authentication

Several web pages in SAP NetWeaver Process Integration Runtime Workbench, fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the...

CVE-2019-0278: Undefined Security Weakness

Under certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration Messaging System, fixed in versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to see the names of database tables used by the application, leading to information disclosure...

PT-2019-11217

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration Runtime Workbench versions prior to 7.10 SAP NetWeaver Process Integration Runtime Workbench versions 7.10 to 7.11 SAP NetWeaver Process Integration Runtime Workbench version 7.30 SAP NetWeaver Process...

PT-2019-4256

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Process Integration Adapter Engine versions prior to 7.10 SAP NetWeaver Process Integration Adapter Engine versions 7.10 to 7.11 SAP NetWeaver Process Integration Adapter Engine version 7.30 SAP NetWeaver Process Integration...

PT-2019-11214

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration Messaging System versions prior to 7.10 SAP NetWeaver Process Integration Messaging System versions 7.10 to 7.11 SAP NetWeaver Process Integration Messaging System version 7.20 SAP NetWeaver Process Integrati...