110 matches found
CVE-2020-6252: Undefined Security Weakness
Under certain conditions SAP Adaptive Server Enterprise Cockpit, version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact syst...
CVE-2020-6243: Improper Control of Generation of Code
Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...
PT-2020-19049
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Web Services versions 15.7, 16.0 Description The issue allows an authenticated user to execute crafted database queries, potentially leading to SQL Injection. This could enable the user to elevate their privilege...
PT-2020-19039
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise versions 15.7, 16.0 Description The issue allows an attacker to read, modify, or delete restricted data on connected servers due to insufficient checks for authenticated users when executing an extended stored...
PT-2020-19054
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise versions 15.7, 16.0 Description The issue allows an attacker to access restricted information due to a missing authorization check under certain conditions. Recommendations For SAP Adaptive Server Enterprise...
PT-2020-19048
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Cockpit version 16.0 Description The issue allows an attacker with access to the local network to obtain sensitive and confidential information, potentially leading to information disclosure. This can be exploite...
CVE-2020-6259: Missing Authorization
Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information which would otherwise be restricted leading to Missing Authorization Check...
PT-2020-19037
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise version 16.0 Description The issue allows an authenticated user to execute crafted database queries, leading to SQL Injection and potentially elevating privileges of users in the system. Recommendations For SAP...
PT-2020-19044
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise Backup Server version 16.0 Description The issue allows arbitrary code execution or code injection due to insufficient validation checks for authenticated users when executing DUMP or LOAD commands. Recommendatio...
CVE-2020-6253: Improper Neutralization of Special Elements used in an SQL Command
Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...
CVE-2020-6241: Improper Neutralization of Special Elements used in an SQL Command
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...
CVE-2020-6250: Undefined Security Weakness
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...
CVE-2020-6248: Improper Input Validation
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
PT-2020-19046
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise version 16.0 Description The issue allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read the system administrator password, leading to information...
CVE-2019-0402
SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure...
CVE-2019-0402
SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure...
CVE-2019-0402: Undefined Security Weakness
SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure...
PT-2019-11236
Name of the Vulnerable Software and Affected Versions: SAP Adaptive Server Enterprise versions prior to 15.7 SAP Adaptive Server Enterprise versions prior to 16.0 Description: The issue exposes some sensitive information to the admin under certain conditions, leading to Information Disclosure...
SAP Adaptive Server Enterprise CVE-2019-0402 Information Disclosure Vulnerability
Description SAP Adaptive Server Enterprise is prone to an unspecified information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. SAP Adaptive Server Enterprise versions 15.7 and 16.0 are vulnerable. Technologies Affecte...
