PT-2014-6314

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.1 Description The issue allows remote attackers to bypass authentication via unspecified vectors, related to a verb tampering attack and SAP JTECHS. Recommendations For SAP Solution Manager version 7.1, consider...

CVE-2014-3129

The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...

Code injection

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

Code injection

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3129

The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...

CVE-2014-3129

CVE-2014-3129 relates to SAP NetWeaver’s Software Lifecycle Manager (SLM) Java Server Pages, where the JSP component handles a crafted request that can lead to information disclosure. Affected product area is SAP Solution Manager 7.1. The description in the connected sources confirms an informati...

CVE-2014-3131: Undefined Security Weakness

SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3129: Exposure of Sensitive Information to an Unauthorized Actor

The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...

PT-2014-5106

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.1 Description The issue is related to improper access restriction in SAP Profile Maintenance, allowing remote authenticated users to obtain sensitive information. This is achieved via an unspecified RFC function...

PT-2014-5107

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.1 Description The issue is related to improper access restriction in SAP Background Processing, allowing remote authenticated users to obtain sensitive information. This is achieved via an unspecified RFC functio...

CVE-2014-3132: Undefined Security Weakness

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

PT-2014-3394

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description The issue allows remote attackers to obtain sensitive information, modify application configurations, and install or remove applications. This is achieved through vectors involvi...

CVE-2013-7363: Undefined Security Weakness

Unspecified vulnerability in the Diagnostics SMD agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol...