Lucene search
+L

107 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/14 12:00 a.m.•7 views

The vulnerability of the module of the SAP Business Warehouse data management and analytics system allows a hacker to trigger a service failure.

The vulnerability of the module of the SAP Business Warehouse data management and analytics system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

5.9CVSS6.5AI score0.00287EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/06/05 7:18 p.m.•26 views

CVE-2026-27681

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS6.2AI score0.00549EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/14 12:08 a.m.•48 views

EUVD-2026-22154

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS5.9AI score0.00549EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•19 views

SAP Business Planning and Consolidation和SAP Business Warehouse SQL注入漏洞

SAP Business Planning and Consolidation, as well as SAP Business Warehouse, are products of the German company SAP. SAP Business Planning and Consolidation is a business planning and integration software. This software provides features for budget preparation, forecasting, and financial...

9.9CVSS6.2AI score0.00549EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27681: Improper Neutralization of Special Elements used in an SQL Command

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS6.1AI score0.00549EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/11 7:08 a.m.•15 views

CVE-2026-27686

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•24 views

EUVD-2026-10459

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/10 12:18 a.m.•5 views

CVE-2026-27686

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/03/10 12:18 a.m.•41 views

CVE-2026-27686

SAP Business Warehouse (Service API) is affected by CVE-2026-27686 due to a Missing Authorization Check. An authenticated attacker could use an affected RFC function module to perform unauthorized configuration and control changes, potentially disrupting request processing and causing denial of s...

5.9CVSS6.2AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•3 views

CVE-2026-27686: Missing Authorization

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

5.9CVSS5.7AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•21 views

SAP Business Warehouse 安全漏洞

SAP Business Warehouse is a key component of the German company SAP, used for executing business processes. It allows users to design, implement, and manage business processes, ensuring compliance with regulations and reducing the need for manual operations through automation. There is a security...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•28 views

PT-2026-24162

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:03 a.m.•17 views

CVE-2024-39594

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the...

6.1CVSS6.3AI score0.00256EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/24 12:00 a.m.•12 views

The vulnerability of the SAP Business Warehouse data management and analytics system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the SAP Business Warehouse data management and analytics system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS5.6AI score0.00241EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-8153

Malware in sbrugna...

3.5CVSS6.4AI score0.02103EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-7869

Malware in sbrugna...

6.1CVSS6.3AI score0.00961EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-19374

Malware in sbrugna...

9.1CVSS9.2AI score0.02247EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-38114

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00256EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-20353

Malicious code in bioql PyPI...

7.7CVSS6.6AI score0.00413EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-20347

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder