SAP CRM Cross-Site Scripting Vulnerability (CNVD-2024-36347)

SAP CRM is a customer relationship management system from SAP, Germany. SAP CRM suffers from a cross-site scripting vulnerability that stems from custom CSS support options that do not adequately encode user-controlled input, which can be exploited by an attacker to execute arbitrary web script o...

SAP PDCE Authorization Issues Vulnerability

SAP PDCE is a solution from SAP Germany. It is designed to help companies manage and optimize the process of integrating and enriching personal data. SAP PDCE suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users...

SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks

Cybersecurity researchers have uncovered security shortcomings in SAP AI Core cloud-based platform for creating and deploying predictive artificial intelligence AI workflows that could be exploited to get hold of access tokens and customer data. The five vulnerabilities have been collectively...

SUSE: Security Advisory (SUSE-SU-2024:2539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

Wiz Research uncovers vulnerabilities in SAP AI Core, allowing malicious actors to take over the service and access customer data...

Teaming up with IBM to secure critical SAP workloads

Trend Micro partners with IBM to offer advanced threat detection and response for protecting critical infrastructures running on IBM Power servers...

SUSE: Security Advisory (SUSE-SU-2024:2485-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2475-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP NetWeaver AS ABAP Protection Mechanism Failure (3456952)

Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a programming error. This leads to a low impact on the application's confidentiality, integrity, and availability. Note that...

SAP NetWeaver AS ABAP Information Disclosure (3454858)

Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on...

Malicious code in sap-attribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5de89e4dd90b8b85bea5f4512df328d5a6a7c1aea2f79b4f8d3307e2328af8 The OpenSSF Package Analysis project identified 'sap-attribute' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-appid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6320c6ca957bf59f7842fdf23a8839fb30c8aee7f82d14bc2066d1c4d1505b11 The OpenSSF Package Analysis project identified 'sap-appid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7691 Malicious code in sap-appid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6320c6ca957bf59f7842fdf23a8839fb30c8aee7f82d14bc2066d1c4d1505b11 The OpenSSF Package Analysis project identified 'sap-appid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7692 Malicious code in sap-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 381eb9774ec795ee1d1d09eea1dfe84d6e8d42293396bcbed791759dcf09a045 The OpenSSF Package Analysis project identified 'sap-cb' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7690 Malicious code in sap-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 381eb9774ec795ee1d1d09eea1dfe84d6e8d42293396bcbed791759dcf09a045 The OpenSSF Package Analysis project identified 'sap-cb' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-author (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9cd11410b0efaf93d866f91d5d6382a6bc208f89d78e31f14a981e3b78b35de5 The OpenSSF Package Analysis project identified 'sap-author' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7679 Malicious code in sap-author (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9cd11410b0efaf93d866f91d5d6382a6bc208f89d78e31f14a981e3b78b35de5 The OpenSSF Package Analysis project identified 'sap-author' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7684 Malicious code in sap-border (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aebcd798a77290cbf74e375f0f2efdd694f5ea2884c2edceb8df9afd9e467a91 The OpenSSF Package Analysis project identified 'sap-border' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...