CVE-2015-5067

The 1 Cross-System Tools and 2 Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982...

PT-2015-6765

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue concerns hardcoded credentials in the Cross-System Tools and Data Transfer Workbench components of SAP NetWeaver. This allows remote attackers to gain access through unspecifi...

CVE-2015-5067: Undefined Security Weakness

The 1 Cross-System Tools and 2 Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors, aka SAP Security Notes 2059659 and 2057982...

SAP NetWeaver Portal ConfigServlet Remote Command Execution

A remote command execution vulnerability has been reported in SAP NetWeaver. The vulnerability is due to insufficient validation in SAP ConfigServlet handling of incoming GET requests. By sending a specially-crafted GET request, an attacker could exploit this vulnerability to inject and execute...

PT-2015-7951

Уязвимость программной интеграционной платформы SAP NetWeaver существует из-за недостаточного ограничения доступа к сервлету tcmonitoringwebserviceweb. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить сведения о доступности внутренних сетевых служб при помощи...

PT-2015-7952

Уязвимость программной интеграционной платформы SAP NetWeaver существует из-за недостаточного ограничения доступа к методу GetSecNetworkId SAPControl. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить сведения о доступности внутренних сетевых служб при помощи...

SAP NetWeaver AS Java XML External Entity Vulnerability

SAP NetWeaver is SAP's software base platform, divided into SAP Netweaver JAVA and Netweaver ABAP. Its predecessor is SAP BASIS components. Because of the development of the Internet and JAVA, SAP adjusted the architecture of the basic platform, adding support for JAVA, but also to enhance the...

Xxe

XML external entity XXE vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tcsldwdmain/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851...

CVE-2015-4091

CVE-2015-4091 describes an XML External Entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4. The issue arises when the SAP XML parser at /sap.com/tc~sld~wd~main/Main processes incoming XML requests with a user-specified DTD (CIM UPLOAD), potentially allowing remote attackers to send TCP reque...

CVE-2015-4091

XML external entity XXE vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tcsldwdmain/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851...

Denial of Service Vulnerability in Multiple SAP Products

SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications; ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language; and SAP .NET Connector is a connector produ...

CVE-2015-4091: Undefined Security Weakness

XML external entity XXE vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tcsldwdmain/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851...

PT-2015-1374

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java version 7.4 Description The issue is related to an XML external entity XXE vulnerability, which allows remote attackers to send TCP requests to intranet servers or have unspecified other impact via an XML request. This ca...

Stack Buffer Overflow Vulnerability in Multiple SAP Products

SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications; ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language; and SAP .NET Connector is a connector betwe...

SAP NetWeaver RFC SDK Information Disclosure Vulnerability

SAP NetWeaver is a business suite of solutions that provides a development and runtime environment for SAP applications. the RFC SDK is one of the software development kits used to build C++ function-controlled RFC communications on an external client. An information disclosure vulnerability exis...

PT-2015-2047

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.4 Description The issue exists due to a lack of access restrictions to external objects contained in links within a processed XML file. This can be exploited by a remote attacker to cause a denial of service or trigger...

CVE-2015-3981

SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037...

CVE-2015-3981

SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037...

CVE-2015-3981: Exposure of Sensitive Information to an Unauthorized Actor

SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037...

PT-2015-6369

Name of the Vulnerable Software and Affected Versions SAP NetWeaver RFC SDK affected versions not specified Description The issue allows attackers to obtain sensitive information via unspecified vectors. Recommendations At the moment, there is no information about a newer version that contains a...