SAP NetWeaver Instance Agent Service Information Disclosure Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Instance Agent Service, which can be exploited b...

SAP NetWeaver Arbitrary HTML Injection

The vulnerability of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the...

SAP NetWeaver LogPortalComponent XSS

The vulnerability of the “/com.sap.portal.design.datamigration.LogPortalComponent” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of the web page. This vulnerability allows a malicious actor to inject arbitrary HTML...

SAP NetWeaver Log Viewer Code Execution

The vulnerability of the Log Viewer component in the SAP NetWeaver software integration platform exists due to an incorrect restriction on the path name to the restricted access directory. The web application recognizes “.” and “/” as part of a valid file path. Exploiting this vulnerability allow...

SAP NetWeaver Navigation Request Sniffer XSS

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...

SAP NetWeaver HTML Injection

The vulnerability of the “/com.sap.portal.themes.styleservice.LockingTestPortalComponent” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary HT...

CVE-2017-14581

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

Design/Logic Flaw

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

CVE-2017-14581

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

CVE-2017-14581

CVE-2017-14581 involves SAP NetWeaver AS JAVA, affected in the Host Control web service for versions 7.0–7.5. The issue allows remote attackers to cause a denial of service (service crash) via a crafted request (as noted in SAP Security Note 2389181). The available references confirm the DoS impa...

CVE-2017-14581

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

PT-2017-13558

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS JAVA versions 7.0 through 7.5 Description The issue allows remote attackers to cause a denial of service, resulting in a service crash, via a crafted request to the Host Control web service. Recommendations For SAP NetWeaver A...

CVE-2017-14581: Undefined Security Weakness

The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service service crash via a crafted request, aka SAP Security Note 2389181...

SAP NetWeaver XML Parser File Read DoS

The vulnerability of the XML parser in the SAP NetWeaver software integration platform arises from an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files or cause service failures...

Xxe

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

CVE-2015-7241

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

CVE-2015-7241

CVE-2015-7241 describes an XML External Entity (XXE) vulnerability in SAP NetWeaver before 7.01 due to the XML parser. The vulnerability allows potential unauthorized access and data exposure via XXE, as documented in multiple sources (NVD, CNVD, CVE lists) and corroborated by exploitation refere...

CVE-2015-7241

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

CVE-2015-7241: Improper Restriction of XML External Entity Reference

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

SAP NetWeaver Visual Composer Remote Code Injection Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A remote code injection vulnerability exists in SAP NetWeaver Visual Composer. An attacker could exploit the...