CVE-2016-7437

SAP Netweaver 7.40 improperly logs 1 DUI and 2 DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks by leveraging filtering of non-critical events in audit analysis reports, aka SAP Security Note 225231...

CVE-2016-7437: Undefined Security Weakness

SAP Netweaver 7.40 improperly logs 1 DUI and 2 DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks by leveraging filtering of non-critical events in audit analysis reports, aka SAP Security Note 225231...

PT-2016-7330

Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.40 Description The issue allows local users to potentially hide rejected attempts to execute RFC function callbacks by improperly logging certain events as non-critical in the SAP Security Audit Log. This could be...

Design/Logic Flaw

Business Warehouse BW in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDUCCMSGETPROFILEPARAM RFC function...

Code injection

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

Code injection

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3131

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

PT-2014-5107

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.1 Description The issue is related to improper access restriction in SAP Background Processing, allowing remote authenticated users to obtain sensitive information. This is achieved via an unspecified RFC functio...

PT-2014-5106

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.1 Description The issue is related to improper access restriction in SAP Profile Maintenance, allowing remote authenticated users to obtain sensitive information. This is achieved via an unspecified RFC function...

CVE-2014-3131: Undefined Security Weakness

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2013-7362: Improper Control of Generation of Code

An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors...

PT-2013-6160

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description A SQL injection issue in the SRTT GET COUNT BEFORE KEY RFC function allows remote attackers to execute arbitrary SQL commands. Recommendations For SAP NetWeaver version 7.30, consider restricting access t...