CVE-2013-3243

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

Security feature bypass

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-3243

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-3243

The CVE-2013-3243 issue affects OpenText/IXOS ECM for SAP NetWeaver (Doculink). It is a Remote ABAP Injection vulnerability that, per ESNC, could allow an attacker to inject and execute ABAP code on a remote SAP system. An exploit is claimed to exist in ESNC’s suite; vendor patching information p...

PT-2013-4249

Name of the Vulnerable Software and Affected Versions OpenText/IXOS ECM for SAP NetWeaver affected versions not specified Description The issue allows remote attackers to execute arbitrary ABAP code. Recommendations At the moment, there is no information about a newer version that contains a fix...

CVE-2013-3243: Undefined Security Weakness

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

Xxe

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

PT-2013-5979

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.31 and earlier Description The issue allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-6244: Undefined Security Weakness

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5751

The CVE-2013-5751 entry describes a directory traversal vulnerability in SAP NetWeaver 7.x that could allow remote attackers to read arbitrary files via unspecified vectors. Connected sources confirm the affected product (SAP NetWeaver 7.x) and the vulnerability class (directory traversal), but d...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

PT-2013-5766

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.x Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For SAP NetWeaver version 7.x, update to a version that includes a fix for this issue...

CVE-2013-5751: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

Sql injection

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

PT-2013-5755

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0 DELETE DERIVATION TABLE." Recommendations For SAP NetWeaver version 7.30, apply t...