CVE-2014-3042

The CVE-2014-3042 entry affects IBM CICS Transaction Server running on z/OS (versions 3.1–5.1). The vulnerability arises from improper handling of CEMT transactions, where remote authenticated users can trigger a denial of service (storage overlay) by sending an invalid 3270 data stream via a 327...

CVE-2014-3042

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service storage overlay by using a 3270 emulator to send an invalid 3270 data stream...

SAP Internet Transaction Server wgate.dll service Parameter XSS - Ver2 (CVE-2003-0749)

A cross-site scripting vulnerability has been reported in SAP Internet Transaction Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

SAP Internet Transaction Server Directory Traversal - Ver2 (CVE-2003-0748)

A directory traversal vulnerability has been reported in wgate.dll for SAP Internet Transaction Server ITS. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Cross site scripting

Cross-site scripting XSS vulnerability in WGate in SAP Internet Transaction Server ITS 6.20 allows remote attackers to inject arbitrary web script or HTML via 1 a "" sequence in the service parameter to wgate.dll, or 2 Javascript splicing in the query string, a different vector than CVE-2006-5114...

CVE-2008-2123

Cross-site scripting XSS vulnerability in WGate in SAP Internet Transaction Server ITS 6.20 allows remote attackers to inject arbitrary web script or HTML via 1 a "" sequence in the service parameter to wgate.dll, or 2 Javascript splicing in the query string, a different vector than CVE-2006-5114...

SAP-07-010.txt

Portcullis Security Advisory 07010 Vulnerable System: SAP Internet Transaction Server Vulnerability Title: Re-introduction of Cross-site Scripting/Cookie Theft Vulnerability. Previous vendor Information: Originally vendor contacted on 02.08.2003 Product: ITS, Version 6.20 Bugtraq ID: 8517 CVE:...

SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - wgate.dll?~service Cross-Site Scripting

SAP Internet Transaction Server 6200.1017.50954.0 Bu WGate - wgate.dll?service Cross-Site Scripting source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently...

SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - 'wgate.dll?~service' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

CVE-2006-5114

SAP ITS exposed vulnerability: Cross-site scripting in wgate.dll (wgate) affecting SAP Internet Transaction Server versions 6.1 and 6.2. Attacker can inject arbitrary script via the ~urlmime or ~command parameters. This CVE (CVE-2006-5114) shares vectors with CVE-2003-0749 but is a separate entry...

SAP Internet Transaction Server XSS vulnerability

Vulnerability class : Cross-Site Scripting Discovery date : 13 September 2006 Remote : Yes Credit : ILION Research Labs Vulnerable : SAP ITS Vulnerable version: Versions 6.1 and 6.2 have been found to be vulnerable. Other versions might be too. A XSS Cross-Site-Scripting vulnerability has been...

SAP Internet Transaction Server 6.10/6.20 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based credentials and to launch oth...

SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS

Binary data 3753.prm...

SAP Internet Transaction Server (ITS) Detection

Binary data 3752.prm...

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow...

SAP Internet Transaction Server wgate Multiple Parameter XSS

The remote web server fails to sanitize the contents of the 'urlmime' parameter to the '/scripts/wgate' script before using it to generate dynamic web content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's browser to ...

SAP Internet Transaction Server Version Detection

Binary data 2733.prm...

CVE-2003-1038

The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...