SAP BW/4HANA Privilege Escalation

The vulnerability of the Transformation and Data Transfer Process DTP in SAP BW/4HANA systems is related to deficiencies in the authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2020-26838

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with high developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It i...

CVE-2020-26838

SAP BW/ BW4HANA are affected by a code-injection vulnerability (CVE-2020-26838) that can be exploited by an authenticated attacker with high developer privileges through a crafted request to execute OS commands. Affected versions include SAP Business Warehouse (700, 701, 702, 731, 740, 750, 751, ...

CVE-2020-26838: Improper Neutralization of Special Elements used in an OS Command

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with high developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It i...

PT-2020-16521

Name of the Vulnerable Software and Affected Versions SAP Business Warehouse versions 700 through 782 SAP BW4HANA versions 100 through 200 Description The issue allows an attacker authenticated with high developer privileges to submit a crafted request to generate and execute code without requiri...

SAP BW/4HANA Remote Authorization Bypass Vulnerability

SAP BW/4HANA is a data warehouse solution based on SAP HANA from SAP, Germany. The product is able to integrate with SAP or non-SAP applications for real-time data processing. A remote authorization bypass vulnerability exists in SAP BW/4HANA version 1.0 SP08, which stems from the maintenance of...

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA fixed in DW4CORE version 1.0 SP08 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...