4161 matches found
PT-2015-5201 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 7.31 and earlier Description: The issue allows remote attackers to access arbitrary files via a crafted XML request. This is related to the ECATT DISPLAY XMLSTRING REMOTE function. Recommendations: For SAP...
SAP NetWeaver Dispatcher Buffer Overflow Vulnerability
SAP NetWeaver is an integrated application platform based on professional standards that significantly reduces the complexity of system integration. A buffer overflow vulnerability exists in SAP NetWeaver Dispatcher, which could be exploited by remote attackers to execute arbitrary code or to den...
SAP NetWeaver Dispatcher Buffer Overflow Vulnerability (CNVD-2015-00497)
SAP NetWeaver is an integrated application platform based on professional standards that significantly reduces the complexity of system integration. A buffer overflow vulnerability exists in SAP NetWeaver Dispatcher, which could be exploited by remote attackers to execute arbitrary code or launch...
CVE-2014-9595
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...
CVE-2014-9594
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the ABAP VM, aka SAP Note 2059734...
Buffer overflow
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the ABAP VM, aka SAP Note 2059734...
CVE-2014-9594
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the ABAP VM, aka SAP Note 2059734...
CVE-2014-9595
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...
PT-2015-4299
Name of the Vulnerable Software and Affected Versions SAP Kernel versions 7.00 32-bit and 7.40 64-bit Description The issue is related to a buffer overflow in the SAP NetWeaver Dispatcher, specifically in the Spool System. This can be exploited by remote authenticated users, potentially leading t...
PT-2015-4298
Name of the Vulnerable Software and Affected Versions SAP Kernel versions 7.00 32-bit and 7.40 64-bit Description A buffer overflow issue exists in the SAP NetWeaver Dispatcher, related to the ABAP VM. This issue can be exploited by remote authenticated users via unspecified vectors, potentially...
CVE-2014-9594: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the ABAP VM, aka SAP Note 2059734...
CVE-2014-9595: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...
SAP NetWeaver 7.4 (Pmitest servlet) - XSS vulnerability
Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: XSS Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2234918 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...
SAP NetWeaver 7.4 - cryptographic issues
Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: cryptographic issues Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2191290 Author: Vahagn Vardanyan ERPScan VULNERABILITY...
SAP NetWeaver 7.4 (MDT component) - XSS vulnerability
Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: XSS Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2206793 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...
Multiple Cross-Site Scripting Vulnerabilities in SAP NetWeaver Business Client
SAP NetWeaver Business Client NWBC is a new-generation SAP client from SAP, which provides users with a single-sign-on entry point to SAP applications through a single user interface and serves as a browsing tool for applications such as SAP BSP, Web Dynpro and Portal. A cross-site scripting...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...
CVE-2014-9569: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...