CVE-2021-42063

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data...

CVE-2021-42063

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data...

Design/Logic Flaw

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data...

CVE-2021-42063

A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data...

SAP Knowledge Warehouse 跨站脚本漏洞

SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...

PT-2021-23497 · Sap · Sap Knowledge Warehouse

Name of the Vulnerable Software and Affected Versions: SAP Knowledge Warehouse versions 7.30 through 7.50 Description: A security issue has been discovered that enables unauthorized attackers to conduct XSS attacks, potentially leading to the disclosure of sensitive data. This is due to the usage...

Cloudera Hue Cross-Site Scripting Vulnerability

Cloudera Hue is a mature open source SQL helper for querying any database and data warehouse.A cross-site scripting vulnerability exists in Cloudera Hue version 4.6.0. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via the type parameter...

Cross-Site Request Forgery (CSRF) in neorazorx/facturascripts

✍️ Description Attacker able to delete any number of Warehouse Products with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your...

WMS SQL Injection Vulnerability

WMS is a warehouse management software. v1.0 version of WMS has a SQL injection vulnerability, the vulnerability is derived from the GET parameter "id" is passed without filtering, an attacker can use the vulnerability to obtain sensitive database information...

WMS SQL注入漏洞

WMS is a warehouse management software. v1.0 version of WMS has a SQL injection vulnerability, the vulnerability is derived from the GET parameter "id" is passed without filtering, an attacker can use the vulnerability to obtain sensitive database information...

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.7]

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

SQL injection vulnerability in jeewms (CNVD-2021-57222)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

XML Entity Injection Vulnerability in jeewms

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms there is an XML entity injection vulnerability , an attacker can use the vulnerability to read the server file...

WMS SQL注入漏洞

WMS is a warehouse management software. A SQL injection vulnerability exists in WMS version 1.0, which can be exploited by remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...

JEEWMS suffers from a file upload vulnerability (CNVD-2021-51493)

JEEWMS JAVA-based warehouse management system support for self-support and third-party, including PDA side and WEB side. JEEWMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in jeewms (CNVD-2021-51414)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can upload malicious files through the vulnerability , control the server...

SQL injection vulnerability in jeewms (CNVD-2021-51413)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

File upload vulnerability in jeewms (CNVD-2021-49574)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

XSS Vulnerability in Fenxian Chain Transportation Management Cloud Platform of Zhongtong Cloud Warehouse Technology Co.

Zhongtong Cloud Warehouse Technology is a logistics enterprise under Zhongtong Express Group, which provides professional warehousing and distribution integrated supply chain comprehensive services for e-commerce platforms, brand merchants, social e-commerce companies and live broadcasting...

File upload vulnerability in jeewms (CNVD-2021-49598)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...