16 matches found
EUVD-2018-14319
Malware in sbrugna...
EUVD-2018-14220
Malware in sbrugna...
CVE-2021-21491
SAP Netweaver Application Server Java Applications based on WebDynpro Java versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2021-21491
SAP Netweaver Application Server Java Applications based on WebDynpro Java versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2021-21491
CVE-2021-21491 affects SAP NetWeaver Application Server Java (WebDynpro Java) and its supported Java applications, specifically versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. The vulnerability is described as a Reverse Tabnabbing issue that can allow an attacker to redirect users to...
PT-2021-14557
Name of the Vulnerable Software and Affected Versions SAP Netweaver Application Server Java Applications based on WebDynpro Java versions 7.00 through 7.50 Description The issue allows an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities. This can potentiall...
CVE-2021-21491: URL Redirection to Untrusted Site
SAP Netweaver Application Server Java Applications based on WebDynpro Java versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2018-2464
SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting XSS vulnerability...
CVE-2018-2464: Improper Neutralization of Input During Web Page Generation
SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting XSS vulnerability...
PT-2018-15580
Name of the Vulnerable Software and Affected Versions SAP WebDynpro Java versions 7.20 through 7.50 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a stored Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inje...
Cross site scripting
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2018-2365
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2018-2365
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2018-2365
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
PT-2018-15499
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal, WebDynpro Java versions 7.30 through 7.50 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Recommendations For versions 7.30 through 7.50,...
CVE-2018-2365: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...