6 matches found
CVE-2022-26102
Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transactio...
EUVD-2022-3441
Malicious code in bioql PyPI...
CVE-2025-42993 Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)
Due to a missing authorization check vulnerability in SAP S/4HANA Enterprise Event Enablement, an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC...
CVE-2025-42993
Summary: CVE-2025-42993 affects SAP S/4HANA (Enterprise Event Enablement). A missing authorization check allows an attacker with access to Inbound Binding Configuration to create an RFC destination and assign a high-privilege user, enabling code execution under that user’s privileges. Impact is l...
CVE-2025-42984
Summary: CVE-2025-42984 affects SAP S/4HANA Manage Central Purchase Contract. The vulnerability is a lack of necessary authorization checks for an authenticated user, allowing an attacker to execute the function import on the entity and render it inaccessible for unrestricted users. The impact is...
RHEL 5 / 6 : spacewalk-backend (RHSA-2017:1259)
An update for spacewalk-backend is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...