3311 matches found
Code injection
Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2014-1963
Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1960
CVE-2014-1960 affects SAP NetWeaver Solution Manager. The root cause is insufficient access restriction that allows remote information disclosure via unspecified vectors. Documented impact is partial confidentiality (CVSS2 base 5.0). Exploitation details are not provided in the sources. Remediati...
CVE-2014-1965
CVE-2014-1965 is an XSS vulnerability in the ISpeakAdapter of SAP Exchange Infrastructure (BC-XI) Integration Repository. Affected: SAP NetWeaver components 3.0, 7.00–7.02, and 7.10–7.11. Description: remote attackers could inject arbitrary web script/HTML via PIP vectors. Impact: potential brows...
CVE-2014-1965
Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...
CVE-2014-1961
Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
CVE-2013-7094
CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...
CVE-2013-7094
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-6869
SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-6821
Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2013-6822
GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...
CVE-2013-6818
SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2013-6819
Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6820
Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...
CVE-2013-6816
Multiple cross-site scripting XSS vulnerabilities in the 1 JavaDumpService and 2 DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...