CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

PT-2014-4008

Name of the Vulnerable Software and Affected Versions SAP Netweaver versions 7.20, 7.01, and earlier Description The issue allows remote attackers to cause a denial of service, resulting in uncontrolled recursion and crash, by utilizing a trace level with a wildcard in the Trace Pattern...

PT-2014-1951

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.40 Description The issue allows remote attackers to obtain sensitive information. This can be achieved via the ReadProfile parameters in the SAP Management Console. Additionally, the vulnerability exists due to a lack o...

CVE-2014-0995: Improper Input Validation

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8590

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8587

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

Xxe

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

Code injection

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8587

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8590

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8592

Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...

CVE-2014-8587

CVE-2014-8587 affects SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, used in SAP NetWeaver AS for ABAP and SAP HANA. The issue allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors. Remediation: upgrade SAPCRYPTOLIB to ...

PT-2014-8639

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.02 and 7.3 Description The issue allows remote attackers to cause a denial of service, resulting in process termination, via a crafted request. Recommendations For SAP NetWeaver version 7.02, update to a version that...

PT-2014-8637

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server AS Java affected versions not specified Description The issue is related to an XML external entity XXE vulnerability in the Web Service Navigator. This allows remote attackers to access arbitrary files by sendi...

CVE-2014-8590: Undefined Security Weakness

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8587: Undefined Security Weakness

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8591: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

CVE-2014-8592: Undefined Security Weakness

Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...