17702 matches found
SAP NetWeaver ABAP Server 操作系统命令注入漏洞
SAP NetWeaver ABAP Server is a German SAP SAP company used as a Web application server for SAP products. SAP NetWeaver ABAP Server suffers from an operating system command injection vulnerability that arises from the application failing to properly filter constructor command special characters,...
SAP SQL Anywhere 安全漏洞
SAP SQL Anywhere is a SAP-specific relational database management system from SAP, Germany. A security vulnerability exists in SAP SQL Anywhere, which originates from the ability to prevent legitimate users from accessing the service by crashing it...
PT-2023-4100 · Sap · Sap Solution Manager
Name of the Vulnerable Software and Affected Versions: SAP Solution Manager Diagnostics agent version 7.20 Description: The issue is related to insufficient validation of incoming requests, allowing an unauthenticated attacker to execute HTTP requests blindly. Successful exploitation can lead to ...
PT-2023-4629 · Sap · Sap Netweaver As Java
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java versions 7.50 Description: The issue allows an unauthenticated attacker to craft a request over the network, resulting in unwarranted modifications to a system log without user interaction. It is related to incorrect...
PT-2023-4139 · Sap · Sap Erp Defense Forces/Public Security
Name of the Vulnerable Software and Affected Versions: SAP ERP Defense Forces and Public Security versions 600 through 807 Description: The issue is related to improper handling of log output, which can be exploited by a remote attacker to overwrite arbitrary files. When using a specific function...
PT-2023-4087 · Sap · Sap Ecc +1
Name of the Vulnerable Software and Affected Versions: SAP ECC and SAP S/4HANA affected versions not specified Description: The issue is related to a programming error in the function module and report of the IS-OIL component, allowing an authenticated attacker to inject an arbitrary operating...
SUSE-SU-2023:2798-1 Security update for prometheus-sap_host_exporter
This update for prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.20 security release bsc1208270. - fixed exporter package description bsc1211311...
PT-2023-36219 · Unknown · Prometheus-Sap Host Exporter
Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to the prometheus-sap host exporter package, which has been rebuilt with the go 1.20 security release. Additionally, the exporter package descripti...
Security Bulletin: Watson CP4D Data Stores is vulnerable to SAP NetWeaver AS for JAVA security bypass vulnerability ( CVE-2023-30744)
Summary Potential SAP NetWeaver AS for JAVA security bypass vulnerability CVE-2023-30744 has been identified that may affect Watson CP4D Data Stores. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-30744 DESCRIPTION: SAP NetWeaver AS for JAVA could allow a remote...
PT-2023-4244 · Sap · Abap Platform +1
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP BASIS 700, SAP BASIS 701, SAP BASIS 702, SAP BASIS 731, SAP BASIS 740, SAP BASIS 750, SAP BASIS 752, SAP BASIS 753, SAP BASIS 754, SAP BASIS 755, SAP BASIS 756, SAP BASIS...
SUSE: Security Advisory (SUSE-SU-2023:2773-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:2777-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-36214 · Unknown · Prometheus-Sap Host Exporter
Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue concerns a security update for prometheus-sap host exporter, which includes a rebuild of the package with the go 1.20 security release. Additionally, the...
SUSE: Security Advisory (SUSE-SU-2023:2754-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : prometheus-ha_cluster_exporter (SUSE-SU-2023:2745-1)
The remote SUSE Linux SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2745-1 advisory. - rebuild the package with the go 1.20 security release bsc1208296. Tenable has extracted the preceding description block directly from the SUSE...
SUSE: Security Advisory (SUSE-SU-2023:2716-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Company finds lost SSD—and confidential data—for sale on eBay
Major software company SAP is putting the pieces of a story involving missing SSD disks back together. Four SSD disks are alleged to have gone on an adventure last November, making their way out of a Walldorf, Germany, datacenter with one of them ending up on eBay. An investigation revealed that...
SUSE: Security Advisory (SUSE-SU-2023:2624-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : google-cloud-sap-agent (SUSE-SU-2023:2617-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2617-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block...