CVE-2016-10311

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...

Stack overflow

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...

CVE-2016-10311

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...

CVE-2016-10311

CVE-2016-10311 affects SAP NetWeaver 7.0–7.5, where a stack-based buffer overflow in the SAPSTARTSRV port enables remote DoS via a crafted packet. The root cause is a buffer overflow in the SAPSTARTSRV handling of crafted requests (SAP Security Note 2295238). Impact in the sources ranges from DoS...

Design/Logic Flaw

The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service out-of-memory error and service instability via a crafted serialized Java object, as demonstrated by serial.cc3, aka SAP Security Note 2315788...

CVE-2016-10304

The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service out-of-memory error and service instability via a crafted serialized Java object, as demonstrated by serial.cc3, aka SAP Security Note 2315788...

CVE-2016-10304

The CVE-2016-10304 entry concerns SAP NetWeaver AS JAVA 7.5, specifically the EP-RUNTIME component. Affected component: SAP EP-RUNTIME within SAP NetWeaver AS JAVA 7.5. Root cause: remote authenticated users can trigger a denial of service via a crafted serialized Java object, as demonstrated by ...

PT-2017-2097

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 through 7.5 Description The issue is caused by a stack-based buffer overflow in the SAPSTARTSRV service of the SAP NetWeaver platform. This allows remote attackers to cause a denial of service by sending a crafted...

CVE-2016-10304: Deserialization of Untrusted Data

The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service out-of-memory error and service instability via a crafted serialized Java object, as demonstrated by serial.cc3, aka SAP Security Note 2315788...

PT-2017-7849

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS JAVA version 7.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in an out-of-memory error and service instability, by sending a crafted serialized Java object. Recommendations F...

CVE-2016-10311: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...

Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Monitoring Application

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Monitoring Application. The...

SAP NetWeaver Log Viewer Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company developed a set of service-oriented integrated application platform. The platform can provide a development and operation environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver. A remote attacker could exploit the...

SAP NetWeaver AS JAVA UMEADMIN Component Directory Traversal Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A directory traversal vulnerability exists in the SAP NetWeaver AS JAVA UMEADMIN component, which could allow an attacker to create any directory with the...

SAP NetWeaver UMEADMIN 7.50 Directory Creation

Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS JAVA UMEADMIN component Vendor URL: http://SAP.com Bugs: Directory traversal Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 13.12.2016 Reference: SAP Security Note 2310790 Author: Mathieu Geli ERPScan...

PT-2018-41: Server-Side Request Forgery in SAP NetWeaver Knowledge Management Configuration Service

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in SAP NetWeaver Knowledge Management Configuration Service. A server-side request forgery SSRF vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 allow...

PT-2018-42

Name of the Vulnerable Software and Affected Versions SAP NetWeaver System Landscape Directory affected versions not specified Description The issue is related to weaknesses in the security mechanisms of the System Landscape Directory component in SAP NetWeaver. It allows a remote attacker to gai...

SAP Netweaver Dynpro Engine Denial of Service Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP Netweaver Dynpro Engine. An attacker could exploit this...

SAP NetWeaver Visual Composer Denial of Service Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP HANA. An attacker could exploit this vulnerability to cause a...

SAP NetWeaver Information Disclosure Vulnerability (CNVD-2017-03609)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver. An attacker could exploit this vulnerability to...