4203 matches found
PT-2014-4384
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue allows remote attackers to obtain sensitive path information. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2014-4383
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the Solution Manager in SAP NetWeaver, which does not properly restrict access. This allows remote attackers to obtain sensitive information via unspecified...
CVE-2014-1964: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Integration Repository in the SAP Exchange Infrastructure BC-XI component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error...
CVE-2014-1965: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...
CVE-2014-1963: Undefined Security Weakness
Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2014-1960: Undefined Security Weakness
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1961: Undefined Security Weakness
Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...
PT-2014-4386
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.20 Description The issue is related to an unspecified vulnerability in the Message Server component, allowing remote attackers to cause a denial of service. The attack vectors are unknown. Recommendations For SAP...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
CVE-2013-7094
CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...
CVE-2013-7094
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2013-6270
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For SAP NetWeaver version 7.30, apply the fix provided by SAP to resolve the issue...
CVE-2013-7094: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-6869
SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2013-6160
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description A SQL injection issue in the SRTT GET COUNT BEFORE KEY RFC function allows remote attackers to execute arbitrary SQL commands. Recommendations For SAP NetWeaver version 7.30, consider restricting access t...
CVE-2013-6869: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-6821
Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2013-6822
GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...
CVE-2013-6816
Multiple cross-site scripting XSS vulnerabilities in the 1 JavaDumpService and 2 DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...