SAP NetWeaver AS 访问控制错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. An Access Control Error vulnerability exists in the Java-based SAP NetWeaver AS version 7.50, which stems from improper access control, and can be...

PT-2023-15948 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757 Description: The ABAP Keyword Documentation of SAP NetWeaver Application Server does not sufficiently encode user-controlled inputs, resulting in ...

SAP Host Agent 访问控制错误漏洞

SAP Host Agent is a set of agent programs from SAP that supports a number of lifecycle management tasks such as operating system monitoring, database monitoring and system instance monitoring. An Access Control Error vulnerability exists in SAP Host Agent versions 7.21 and 7.22, which arises from...

SAP BusinessObjects Business Intelligence Platform 4.1 < 4.1 SP12 P9 / 4.2 < 4.2 SP8 P5 XSS (2965154)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.1 SP12 P9, 4.2 SP8 P5 or 4.2 SP9 P0. It is, therefore, affected by a XSS vulnerability. An authenticated attacker is allowed to inject malicious JavaScript payload into the custom...

PT-2023-15949 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform version 420 Description: The issue arises from some calls returning json with the wrong content type in the header of the response. This can make a custom application that directly calls the...

PT-2023-15947 · Sap · Sap Host Agent

Name of the Vulnerable Software and Affected Versions: SAP Host Agent Windows versions 7.21, 7.22 Description: An attacker who gains local membership to SAP LocalAdmin could replace executables with a malicious file that will be started under a privileged account. This can only occur if the syste...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Circumvention of security measure. Remote code execution User Rights SQL...

SAP BusinessObjects Business Intelligence Platform 4.2 < 4.2 SP9 P6 / 4.3 < 4.3 SP1 P11 Information Disclosure

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P6, 4.3 SP1 P11, 4.3 SP2 or 4.3 SP3. It is, therefore, affected by a vulnerability: - Under certain conditions SAP Business Objects Business Intelligence Platform - versions...

PT-2023-1013 · Sap · Sap Businessobjects Business Intelligence Analysis Edition For Olap

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Analysis edition for OLAP affected versions not specified Description: The issue allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On...

SUSE: Security Advisory (SUSE-SU-2023:0033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2023:0020-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0020-1 advisory. Update to version 2.10: - Add option to turn off system token support bsc1205089 - Update the lastseenat column on zypper...

SUSE: Security Advisory (SUSE-SU-2023:0023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : saphanabootstrap-formula (SUSE-SU-2023:0010-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0010-1 advisory. - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary user...

SAP NetWeaver AS ABAP URL Redirection (3258950, 2872782)

SAP NetWeaver AS ABAP allows an unauthenticated malicious user to redirect users to an untrusted site through a malicious link, due to insufficient input validation. The malicious user can view or modify information causing a limited impact on the confidentiality and the integrity of the...

SAP NetWeaver AS Java XSS (3262544)

Due to insufficient input validation, SAP NetWeaver AS Java HTTP Provider Service - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an attacker can view or modify information causing a limited impact on the confidentiality...

SUSE Linux Enterprise Server 信息泄露漏洞

SUSE Linux Enterprise Server is a set of enterprise server edition Linux operating system from SUSE Germany. SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server for SAP Applications 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP5 An information disclosure vulnerability...

SUSE-SU-2023:0011-1 Security update for saphanabootstrap-formula

This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...

SUSE-SU-2023:0009-1 Security update for saphanabootstrap-formula

This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 revert changes to spec file to re-enable SLES RPM builds CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/hacluster.sls bsc1205990 - Version bump 0.13.0 pass sid to sudoers in a SLES12...

SUSE SAP HANA platform bootstrap Salt formula 安全漏洞

The SUSE SAP HANA platform bootstrap Salt formula is a Salt formula from SUSE Germany. It is used to bootstrap and manage multiple SAP HANA platform environments. A security vulnerability exists in the SUSE SAP HANA platform bootstrap Salt formula, which can be exploited by an attacker to bypass...