FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...

Dolibarr 跨站脚本漏洞

Dolibarr is an ERP/CRM system with plug-and-play modules and a well-established ecosystem with customizations and service providers worldwide. version 12.0.5 of Dolibarr suffers from a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting XSS attacks...

Avantune Genialcloud ProJ 跨站脚本漏洞

Avantune Genialcloud ProJ is a cloud-based ERP platform from Avantune Canada. version 10 of Avantune Genialcloud ProJ is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to inject and execute arbitrary web scripts or HTML via a crafted payload...

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software server relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2022-28930

ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml...

Orlansoft ERP 代码问题漏洞

Orlansoft ERP is an RRP system. Orlansoft ERP has a security vulnerability that stems from insecure deserialization of user-supplied content. An attacker can execute arbitrary code via a carefully crafted serialized Java object...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in the user interface’s information presentation, allows a perpetrator to carry out spear-phishing attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in information presentation at the user interface level. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request...

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP involves incorrect code generation. Exploiting this vulnerability allows an attacker who operates remotely to generate arbitrary code...

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the software package for accounting or resource planning in Microsoft Dynamics GP relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

PT-2022-15505 · Sap · Sap Erp Hcm Portugal

Name of the Vulnerable Software and Affected Versions: SAP ERP HCM Portugal versions 600 through 608 Description: The issue concerns a report that reads payroll data of employees in a certain area without performing necessary authorization checks. This allows an attacker to access payroll...

SAP Solution Manager 安全漏洞

SAP Solution Manager is a system management platform from SAP Germany that integrates system monitoring, SAP support desktops, self-service, ASAP implementation, etc. SAP Solution Manager has a security vulnerability that can be exploited by attackers to compromise vulnerable systems, including...

SAP NetWeaver Application Server 资源管理错误漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A resource management error vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to compromise vulnerable systems including Business Objects, SAP CRM Web Channel, SAP CRM, SAP...

SAP多个产品环境问题漏洞

SAP NetWeaver Application Server Java is an application server that provides a Java runtime environment.SAP NetWeaver Application Server is an application server.SAP ERP is a series of software for ERP management.SAP CRM is a customer relationship management system. SAP NetWeaver Application Serv...

SAP多个产品环境问题漏洞

SAP NetWeaver Application Server Java and SAP NetWeaver Application Server are both products of SAP Germany.SAP NetWeaver Application Server Java is an application server that provides a Java runtime environment. SAP NetWeaver Application Server Java is an application server that provides a Java...

SAP Business Objects Web Intelligence 跨站脚本漏洞

SAP Business Objects Web Intelligence is a centralized suite from SAP, a German company used for data reporting, visualization and sharing. SAP Business Objects Web Intelligence is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to compromise vulnerable...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations with standalone executables and ActiveX space. An input validation error vulnerability exis...

SAP NetWeaver AS SQL注入漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. SAP NetWeaver AS has a SQL injection vulnerability that can be exploited by attackers to threaten vulnerable systems, including Business Objects, SAP...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations with standalone executables and ActiveX space. An input validation error vulnerability exis...