EUVD-2017-14475

Malware in sbrugna...

com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (1.4.0-0) +27 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0-release, =1.0.0-release, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: GHSA-MGH8-HCWJ-H57V...

com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (1.4.0-0) +27 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0-release, =1.0.0-release, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: OSV:GHSA-MGH8-HCWJ-H57V...

XML External Entity (XXE)

odata-server-core is vulnerable to XML external entity XXE attacks. The support for external entities are not disabled and allows remote attackers to inject a malicious XML document to retrieve confidential system files or perform requests on behalf of the server...

com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (1.4.0-0) +27 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0-release, =1.0.0-release, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: MEND:CVE-2019-17554...

CVE-2017-5371

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

CVE-2017-5371

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

Code injection

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

CVE-2017-5371

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

CVE-2017-5371: Improper Input Validation

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

PT-2017-16458

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise ASE version 16 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a series of crafted requests to the Odata Server. Recommendations For SAP Adapti...

SAP ASE ODATA SERVER denial of service vulnerability(CVE-2017-5371)

No description provided by source...

SAP ASE ODATA Server 16 Denial Of Service Vulnerability

SAP ASE ODATA Server version 16 suffers from a denial of service vulnerability. Application: SAP ASE Versions Affected: SAP ASE ODATA Server v16 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.10.2016...