CVE-2013-6823

GRMGApp in SAP NetWeaver is affected by a remote-authentication bypass vulnerability (CVE-2013-6823). The issue allows bypassing intended access restrictions via unspecified vectors over a network. The NVD entry lists a MEDIUM base score (6.4), with network attack vector, low complexity, no authe...

CVE-2013-6819

SAP NetWeaver CVE-2013-6819 is an XSS vulnerability in the Performance Provider component. The available documents identify the affected software as SAP NetWeaver and describe remote injection of arbitrary web script/HTML via unspecified vectors. No concrete root cause details, affected versions,...

CVE-2013-6822

CVE-2013-6822 affects the SAP NetWeaver component GRMGApp and is tied to an XML External Entity (XXE) issue. The available description states a remote impact but does not specify exact vulnerable versions, attack vectors, or concrete remediation. Several connected records reference SAP advisories...

CVE-2013-3243

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

Security feature bypass

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-3243

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-3243

The CVE-2013-3243 issue affects OpenText/IXOS ECM for SAP NetWeaver (Doculink). It is a Remote ABAP Injection vulnerability that, per ESNC, could allow an attacker to inject and execute ABAP code on a remote SAP system. An exploit is claimed to exist in ESNC’s suite; vendor patching information p...

CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

Xxe

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-6244

The CVE-2013-6244 issue affects SAP NetWeaver 7.31 and earlier, in the Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP). The root cause is an XML External Entity (XXE) vulnerability where an XML document containing an external entity declaration and an entity ref...

SAP NetWeaver Message Server – DoS

Application: SAP NetWeaver Message Server Versions Affected: SAP KERNEL 7.20 32BIT Vendor URL: http://www.sap.com Bugs: Improper Input Validation Exploits: PoC Reported: 10.07.2013 Vendor response: 11.07.2013 Date of Public Advisory: 25.01.2014 Reference: SAP Security Note 1773912 Author: George...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5751

The CVE-2013-5751 entry describes a directory traversal vulnerability in SAP NetWeaver 7.x that could allow remote attackers to read arbitrary files via unspecified vectors. Connected sources confirm the affected product (SAP NetWeaver 7.x) and the vulnerability class (directory traversal), but d...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

Sql injection

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

CVE-2013-5723

CVE-2013-5723 describes a SQL injection in SAP NetWeaver 7.30. The vulnerability affects SAP NetWeaver 7.30, where an attacker can remotely execute arbitrary SQL commands via an unspecified vector related to ABAD0_DELETE_DERIVATION_TABLE. The provided documents do not specify a concrete vulnerabl...