MAL-2026-1617 Malicious code in @f5rest/icr-odata-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d28fb3bbf60046908366ebaa32a43e76c4eaeb9646502ca526e1aa54332457 The package @f5rest/icr-odata-adapter was found to contain malicious code...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2025-23191

Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the atom:link values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacke...

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...

EUVD-2017-14475

Malware in sbrugna...

EUVD-2018-14314

Malware in sbrugna...

EUVD-2019-1111

Malware in sbrugna...

EUVD-2021-14356

Malware in sbrugna...

EUVD-2018-14320

Malware in sbrugna...

EUVD-2023-32714

Malicious code in bioql PyPI...

EUVD-2025-14347

Malicious code in bioql PyPI...

EUVD-2025-7700

Malicious code in bioql PyPI...

EUVD-2024-41414

Malicious code in bioql PyPI...

EUVD-2025-3137

Malicious code in bioql PyPI...

EUVD-2023-45871

Malicious code in bioql PyPI...

The vulnerability of the OData function in the SAP S/4HANA software platform allows attackers to influence the integrity and confidentiality of the protected information.

The vulnerability of the OData function in the SAP S/4HANA software platform is related to the falsification of cross-site requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity and confidentiality of the protected information...

CVE-2024-45282

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations...

CVE-2023-41368

The OData service of the S4 HANA Manage checkbook apps - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call...

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

CVE-2025-43002

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted...