SAP多个产品输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D viewer, SAP ERP is a series of software for ERP management, SAP CRM is a customer relationship management system, Sap Crm Web Channel is an e-commerce management system. Sap Crm Web Channel is an e-commerce management system. An input validation error...

SAP ERP HCM 安全漏洞

SAP ERP HCM is an enterprise human resource management solution from SAP, Germany. A security vulnerability exists in SAP ERP HCM that can be exploited by attackers to compromise vulnerable systems, including Business Objects, SAP CRM Web Channel, SAP CRM, SAP ERP, NetWeaver, ASE...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in SAP ERP. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in SAP ERP. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

Dalmark Systems Systeam 安全漏洞

Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...

CVE-2021-42062

SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts...

SAP ERP HCM 安全漏洞

SAP ERP HCM is an enterprise human resource management solution from SAP, Germany. A security vulnerability exists in SAP ERP HCM that stems from the fact that SAP ERP HCM Portugal does not perform the necessary authorization checks on reports that read employee payroll data for a specific region...

CVE-2021-38164

SAP ERP Financial Accounting RFOPENPOSTINGFR versions - SAPAPPL - 600, 602, 603, 604, 605, 606, 616, SAPFIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific user...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in SAP ERP that allows an attacker to bypass security policies and remotely execute arbitrary code...

SAP ERP 代码注入漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP suffers from a code injection vulnerability that allows an attacker to bypass security policies and remotely execute arbitrary code...

Microsoft Dynamics 代码注入漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A code injection vulnerability exists in Microsoft Dynamics. The following products an...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-57445)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is seamlessly integrated with a management suite. Oracle Human...

Oracle JD Edwards EnterpriseOne Tools has an unspecified vulnerability (CNVD-2021-54681)

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning applications ERP from Oracle Corporation USA. JD Edwards EnterpriseOne Tools is one of the components used to install, update and manage JD Edwards EnterpriseOne applications. An unspecified vulnerability exist...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-54731)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite. A...

In4Velocity In4Suite ERP SQL注入漏洞

In4Velocity In4Suite ERP is an enterprise resource program from In4Velocity India. It is ERP software built for the real estate and construction industry that provides complete visibility of business information and helps streamline processes, improve efficiency, manage complexity and increase...

CVE-2021-30171

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

竣禾科技 ERP POS 跨站脚本漏洞

Junghwa Technology ERP POS System is an application software of China Junghwa Technology Co. system used for ERP management. ERP POS suffers from a cross-site scripting vulnerability that originates from special characters on the customer profile page not being filtered during user input, which...

Apache OFBiz Remote Code Execution Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz versions prior to 17.12.07 remote code execution vulnerability , the vulnerability stems from...