151 matches found
CVE-2023-35873
The Runtime Workbench RWB of SAP NetWeaver Process Integration - version SAPXITOOL 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
CVE-2023-35872
The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
CVE-2023-35873
The Runtime Workbench RWB of SAP NetWeaver Process Integration - version SAPXITOOL 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
Design/Logic Flaw
The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
Authentication flaw
The Runtime Workbench RWB of SAP NetWeaver Process Integration - version SAPXITOOL 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
CVE-2023-35873
SAP NetWeaver Process Integration Runtime Workbench (RWB) on SAP_XITOOL 7.50 reportedly fails to enforce authentication for certain user-identity–dependent functions, potentially allowing an unauthenticated user to view technical data about product status and configuration. The entry notes no acc...
CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)
The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)
The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...
CVE-2023-35872
CVE-2023-35872 affects SAP NetWeaver Process Integration (MDT component) with version SAP_XIAF 7.50. The issue is a missing authentication check for certain MDT functionalities that require user identity, potentially allowing an unauthenticated user to access technical data about product status a...
SAP NetWeaver Process Integration 访问控制错误漏洞
SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An access control error...
SAP NetWeaver AS Java Multiple Vulnerabilities (April 2023)
SAP NetWeaver Application Server for Java is affected by multiple vulnerabilities, including the following: - SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to...
CVE-2022-41272
An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...
CVE-2022-41271
An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration PI - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability...
CVE-2022-41272
SAP NetWeaver Process Integration (PI) 7.50 is affected by CVE-2022-41272. An unauthenticated attacker can connect to open interfaces exposed via JNDI in the UDS feature and use open naming/directory APIs to access services, enabling full read access to user data, limited modifications, and syste...
PT-2022-25780 · Sap · Sap Netweaver Process Integration
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration PI version 7.50 Description: The issue allows an unauthenticated user to attach to an open interface exposed through JNDI by the Messaging System, making use of an open naming and directory API to access...
SAP NetWeaver Process Integration 安全漏洞
SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is primarily used for the exchange of information between internal systems and external ones. A security vulnerability...
SAP NetWeaver Process Integration 安全漏洞
SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is primarily used for the exchange of information between internal systems and external ones. A security vulnerability...
PT-2022-25781 · Sap · Sap Netweaver Process Integration
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration PI version 7.50 Description: An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS and make use of an open naming and directory API t...
SAP Process Integration Privilege Permission and Access Control Issues Vulnerability
SAP Process Integration is middleware from SAP Germany that enables SAP to seamlessly integrate with non-SAP applications in the company or with systems outside the company. A vulnerability exists in the Integration Builder Framework for SAP Process Integration versions 7.10, 7.11, 7.20, 7.30,...
SAP Process Integration Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-36675)
SAP Process Integration is a middleware provided by SAP Germany that enables SAP to seamlessly integrate with non-SAP applications in the company or with systems external to the company. A privilege permission and access control issue vulnerability exists in SAP Process Integration versions 7.10,...