4161 matches found
PT-2010-5536
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Client affected versions not specified Description The issue is related to a stack-based buffer overflow in the SapThemeRepository ActiveX control, specifically in the sapwdpcd.dll component. This can be exploited by...
SAP NetWeaver Business Client SapThemeRepository ActiveX Control Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Business Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
SAP NetWeaver Administrator Panel ECC 6.0 Cross Site Scripting
Digital Security Research Group DSecRG Advisory Application: SAP NetWeaver Administrator panel Versions Affected: SAP NetWeaver Administrator panel from ECC 6.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010...
SAP NetWeaver 7.0 - SQL Monitor Multiple Cross-Site Scripting Vulnerabilities
SAP NetWeaver 7.0 - SQL Monitor Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44904/info The SQL Monitor of SAP NetWeaver is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker...
SAP NetWeaver 7.0 - SQL Monitor Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/44904/info The SQL Monitor of SAP NetWeaver is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...
SAP NetWeaver Composition Environment sapstartsrv.exe Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP NetWeaver Composition Environment. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sapstartsrv.exe process which listens by default on ports...
SAP NetWeaver Trust Center Service - XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 11.05.2010 Vendor response: 12.05.2011 Date of Public Advisory: 17.06.2011 CVSS: 5.0 Author: Dmitriy Evdokimov Description SAP NetWeaver Trust Center Service has linked XSS...
SAP NetWeaver JavaMailExamples - XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver JavaMailExamples Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 11.05.2010 Vendor response: 12.05.2010 Date of Public Advisory: 19.08.2011 Author: Dmitriy Evdokimov Description SAP Netweaver JavaMailExamples has linked X...
SAP NetWeaver Data Archiving Service — Multiple XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Data Archiving Service 6.4-7.3 Vendor URL: http://www.sap.com Bugs: Linked XSS and Stored XSS Exploits: YES Reported: 11.05.2010 Vendor response: 11.05.2010 Date of Public Advisory: 12.04.2011 Author: Dmitriy Evdokimov Description SAP...
SAP NetWeaver SOAP RFC – Denial of Service / Integer overflow
Application: SAP NetWeaver Kernel Versions Affected: ernel 4.6 – 7.2 Vendor URL: http://www.sap.com Bugs:XML Attribute Blow-up attack Exploits: YES Reported: 09.12.2010 Vendor response: 10.12.2010 Solution:YES Date of Public Advisory: 20.07.2011 Author: Alexey Sintsov Description It is possible t...
SAP NetWeaver SLD - Information Disclosure
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Information disclose Exploits: YES Reported: 09.06.2010 Vendor response: 10.06.2010 Date of Public Advisory: 17.06.2011 CVSS: 5.0 Author:Alexander Polyakov Description Information disclosure...
SAP NetWeaver Integration Directory — Multiple XSS
Application: SAP NetWeaver XI Versions Affected: SAP NetWeaver XI Vendor URL: Bugs: XSS Exploits: YES Reported: 09.06.2010 Vendor response: 10.06.2010 Date of Public Advisory: 09.03.2011 CVE-number: Author: Dmitriy Evdokimov Description SAP NetWeaver Integration Directory has multiple linked XSS...
SAP NetWeaver - Unauthorized logon page
Application: SAP NetWeaver Versions Affected: 7.00 7.0014.20050509144048.0000 Vendor URL: http://www.sap.com Bugs: Missing Authorization Check Exploits: NO Reported: 20.08.2010 Vendor response: 23.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author: Alexander...
SAP NetWeaver J2EE Engine - Authentication bypass
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 20.08.2010 Vendor response: 23.08.2010 Date of Public Advisory: 17.06.2011 CVSS: 9.0 Author:Alexander Polyakov Description Authentication bypass vulnerability in SAP NetWeav...
CVE-2010-2904
Multiple cross-site scripting XSS vulnerabilities in the System Landscape Directory SLD component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to testsdic and the 2 helpstring parameter to paramhelp.jsp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the System Landscape Directory SLD component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to testsdic and the 2 helpstring parameter to paramhelp.jsp...
CVE-2010-2904
Multiple cross-site scripting XSS vulnerabilities in the System Landscape Directory SLD component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to testsdic and the 2 helpstring parameter to paramhelp.jsp...
CVE-2010-2904
CVE-2010-2904 documents describe multiple cross-site scripting (XSS) vulnerabilities in the SAP NetWeaver System Landscape Directory (SLD) component, affecting versions 6.4 through 7.02. The root cause involves injection of arbitrary web script or HTML via (1) the action parameter to testsdic and...
CVE-2010-2904: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the System Landscape Directory SLD component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to testsdic and the 2 helpstring parameter to paramhelp.jsp...
