The vulnerability of the client to interacting with the SAP HANA database via JDBC allows a malicious actor to execute arbitrary code. This vulnerability is related to improper code generation, enabling the intruder to perform arbitrary actions.

The vulnerability of clients to interacting with the SAP HANA database via JDBC is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

SUSE SLED15: SLES16-Migration / SLES16-SAP_Migration / python3-Cerberus / etc (SUSE-SU-SUSE-RU-2025:4131-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:4131-1 advisory. Changes for suse-migration-sle16-activation: - Simplify interface naming by disabling predictable names at boot...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain rea...

The vulnerability of the SAP GUI graphical user interface for Windows lies in the storage of confidential information in an open manner, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP GUI graphical user interface for Windows relates to the storage of confidential information in an open manner. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

The vulnerability of SAP NetWeaver Java Application Server’s web applications stems from incorrect path name restrictions for the restricted access catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to redirecting users to an unreliable website, allows a hacker to redirect users to a malicious website.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, involves redirecting users to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious web page remotely...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SAP Business Connector SAP BC application for automating business processes and data processing is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: python-kdcproxy security update

An update for python-kdcproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Critical: Red Hat Security Advisory: lasso security update

An update for lasso is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Critical: Red Hat Security Advisory: lasso security update

An update for lasso is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of SAP NetWeaver AS Java software integration platforms, related to improper code generation management, allows attackers to load any arbitrary file.

The vulnerability of SAP NetWeaver AS Java software-based integration platforms is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to download any arbitrary file remotely...

The vulnerability of the SAP NetWeaver software integration platform, related to errors in privilege management, allows a perpetrator to gain access to read, modify, and delete confidential data.

The vulnerability of the SAP NetWeaver software integration platform is related to errors in privilege management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read, modify, or delete access to confidential data...

SAP Business Connector Cross-Site Scripting Vulnerability (CNVD-2025-29169)

SAP Business Connector is a middleware from SAP, Germany. A cross-site scripting vulnerability exists in SAP Business Connector due to improper validation of user-supplied input in the PRTG Web Monitor web interface. An attacker could exploit the vulnerability to access or modify information with...

SAP NetWeaver AS Java Information Disclosure (3643603)

The version of SAP NetWeaver Application Server Java installed on the remote host is affected by an information disclosure vulnerability. Due to improper limitation of a pathname to a restricted directory, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker...

SAP Pushes Emergency Patch for 9.9 Rated CVE-2025-42887 After Full Takeover Risk

CVE 2025 42887 vulnerability, rated 9.9, allows code injection through Solution Manager giving attackers full SAP control urgent patch needed to block system takeover...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...