SAP Web dispatcher安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly...

SAP Web Dispatcher 缓冲区错误漏洞

SAP Web dispatcher and SAP Internet Communication Manager SAP ICM are both products of SAP Germany. SAP Internet Communication Manager is a component of the SAP NetWeaver application server. It is used to receive and send Web requests HTTP, HTTPS, SMTP.A buffer overflow vulnerability exists in SA...

PT-2022-19222 · Sap · Internet Communication Manager +1

Name of the Vulnerable Software and Affected Versions: SAP Web Dispatcher and SAP Internet Communication Manager affected versions not specified Description: The issue is caused by an uncontrolled recursion in the application, leading to a denial of service, where the application may crash but ca...

PT-2022-18878 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue arises when a user accesses SOAP Web services, and the system fails to sufficiently validate the XML document accepted from an untrusted source. This...

SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and enable...

SAP Focused Run 路径遍历漏洞

SAP Focused Run is a data center and key account system operations management solution the ultimate solution for high-volume monitoring, alerting, diagnostics, and analysis from SAP Germany.SAP Focused Run is vulnerable to a directory traversal vulnerability that could be exploited by a remote...

PT-2022-18553 · Sap · Sap Focused Run

Name of the Vulnerable Software and Affected Versions: SAP Focused Run Simple Diagnostics Agent 1.0 version 1.0 Description: A highly privileged remote attacker can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information...

SUSE: Security Advisory (SUSE-SU-2022:1149-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP Germany. SAP NetWeaver Application Server elevation of privilege vulnerability, which stems from a lack of authentication checks in the XML data archiving service, can be exploited by an attacker to cause an elevation of privilege...

SAP SQL Anywhere 安全漏洞

SAP SQL Anywhere is an SAP-specific relational database management system from SAP, a German company. SAP SQL Anywhere suffers from a denial-of-service vulnerability that can be exploited by an authenticated attacker to crash the server and prevent legitimate users from accessing the SQL Anywhere...

SAP BusinessObjects Business Intelligence platform 信息泄露漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. SAP 3D Visual Enterprise Viewer version 9.0 is vulnerable to an input validation error that could be exploited to crash the application and temporarily disable users until the application is restarted. The application can be...

SUSE: Security Advisory (SUSE-SU-2022:1148-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP NetWeaver ABAP Server 输入验证错误漏洞

SAP Netweaver is a set of integrated service-oriented application platforms from SAP, Germany. SAP NetWeaver ABAP Server and ABAP Platform is vulnerable to user redirection, which can be exploited by unauthenticated attackers to trick users into disclosing personal information...

SUSE: Security Advisory (SUSE-SU-2022:1131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:1130-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP Information System Access Control Error Vulnerability

SAP Information System is an information management system from SAP Germany. An Access Control Error vulnerability exists in SAP Information System 1.0 that stems from insufficient program authentication strength and can be exploited by an unauthenticated attacker to create a new administrator...

SAP Information System 1.0.0 Missing Authorization

Exploit Title: SAP Information System 1.0.0 - Improper Authentication Date: 06/04/2022 CVE: CVE-2022-1248 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15262/sap-information-system-using-phppdo-oop.html Version: 1.0.0 Tested on: Linux Title: ================ SAP...

SAP Information System 1.0 Shell Upload Exploit

Title: SAP Information System 1.0 Shell Upload Author: Hejap Zairy Date: 05.04.2022 Vendor: https://www.sourcecodester.com/php/15262/sap-information-system-using-phppdo-oop.html Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/SAPInformationSystem.zip Reference:...

CVE-2022-1248

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...