Lucene search
+L

29 matches found

Cvelist
Cvelist
added 2020/11/10 4:14 p.m.30 views

CVE-2020-26814

SAP Process Integration PGP Module - Business-to-Business Add On, version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure...

4.9CVSS5.1AI score0.00908EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/07/22 12:0 a.m.8 views

SAP Process Integration PI Rest Adapter Cross-Site Scripting Vulnerability

SAP Process Integration is a middleware provided by SAP Germany that enables SAP to seamlessly integrate with non-SAP applications in the company or with systems external to the company. A cross-site scripting vulnerability exists in SAP Process Integration PI Rest Adapter. The vulnerability stem...

6.1CVSS6.5AI score0.00654EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.10 views

The vulnerability of the REST adapter of the SAP Process Integration integration platform allows attackers to execute cross-site scripting attacks.

The vulnerability of the REST adapter of the SAP Process Integration integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS6AI score0.00654EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2020/01/14 6:15 p.m.13 views

Cross site scripting

PI Rest Adapter of SAP Process Integration update provided in SAPXIAF 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

4.3CVSS5.9AI score0.00654EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.7 views

The vulnerability of the SAP Process Integration integration platform, related to insufficient verification of data authenticity, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Process Integration integration platform is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

5.3CVSS5.9AI score0.00805EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/10/08 8:15 p.m.9 views

CVE-2019-0379

SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle BC, leading to Missing Authentication Check...

5.3CVSS6.1AI score0.00805EPSS
SaveExploits0References2
NVD
NVD
added 2019/10/08 8:15 p.m.28 views

CVE-2019-0379

SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle BC, leading to Missing Authentication Check...

5.3CVSS5.5AI score0.00805EPSS
SaveExploits0References2
Prion
Prion
added 2019/10/08 8:15 p.m.19 views

Authentication flaw

SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle BC, leading to Missing Authentication Check...

5CVSS5.5AI score0.00805EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/08 7:27 p.m.37 views

CVE-2019-0379

SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle BC, leading to Missing Authentication Check...

5.5AI score0.00805EPSS
SaveExploits0References2
Rows per page
Query Builder