CVE-2015-7968

nwbcext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbcext2int/ URI...

SAP NetWeaver and S/4HANA Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver and S/4HANA. The vulnerability stems from a lack of...

SAP NetWeaver AS Java Information Disclosure Vulnerability (CNVD-2020-18535)

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. An information disclosure vulnerability exists in SAP NetWeaver AS Java. An attacker can exploit thi...

The vulnerability of the SAP NetWeaver software integration platform’s keystore service allows attackers to disclose protected information.

The vulnerability of the SAP NetWeaver software integration platform’s keystore service is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the SAP NetWeaver software integration platform, caused by deficiencies in the authentication process, allows attackers to increase their privileges.

The vulnerability of the SAP NetWeaver software integration platform is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

SAP NetWeaver ABAP Online Community Stored Cross-Site Scripting Vulnerability

SAP NetWeaver is SAP's integrated technology platform. A cross-site scripting vulnerability exists in SAP NetWeaver ABAP Online Community, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user...

SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2020-13196)

SAP NetWeaver is SAP's integrated technology platform. A cross-site scripting vulnerability exists in SAP NetWeaver, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is...

The vulnerability of the Startup Framework component of Netweaver Application Server Java, which allows a perpetrator to disclose protected information

The vulnerability of theStartupFramework component in the Netweaver Application Server Java web application lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of Web containers in Netweaver Application Server Java applications relates to the unlimited loading of dangerous files, allowing attackers to upload malicious files.

The vulnerability of Web containers in Netweaver Application Server Java applications is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a malicious actor to remotely upload malicious files...

The vulnerability of the SAP NetWeaver AS ABAP software platform arises from deficiencies in the encryption of user-input data. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver AS ABAP software platform exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications lies in the lack of measures to sanitize input data. This allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of SAP software for integrating corporate applications of SAP NetWeaver Process Integration is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

SAP NetWeaver XML Processing Denial of Service Vulnerability

SAP NetWeaver is SAP's integrated technology platform. A security vulnerability exists in SAP NetWeaver's handling of XML documents, which can be exploited by remote attackers to submit a special request for a denial-of-service attack...

CVE-2020-6187

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6193

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6185

Under certain conditions ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability...

CVE-2020-6185

Under certain conditions ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability...

CVE-2020-6190

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

CVE-2020-6187

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6190

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

CVE-2020-6193

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...