32 matches found
CVE-2018-2400
Under certain conditions SAP Business Process Automation BPA By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted...
Authentication flaw
Under certain conditions SAP Business Process Automation BPA By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted...
CVE-2018-2400
Under certain conditions SAP Business Process Automation BPA By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted...
CVE-2018-2401
SAP Business Process Automation BPA By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity XXE vulnerability...
CVE-2018-2366
SAP Business Process Automation (BPA) by Redwood (versions 9.0 and 9.1) is affected by a directory-traversal vulnerability caused by insufficient validation of user-supplied path information. An attacker can use the "../" traversal sequence to access arbitrary files on the server, potentially exp...
CVE-2018-2401
CVE-2018-2401 affects SAP Business Process Automation (BPA) By Redwood) , where XML External Entity (XXE) is possible due to insufficient validation of XML from untrusted sources. The NVD notes a high-impact CVSS3 base score (8.8) with network access, low attack complexity, and high confidentiali...
CVE-2018-2400
CVE-2018-2400 affects SAP Business Process Automation (BPA) by Redwood, versions 9.00 and 9.10. According to sources, an attacker could access information that should be restricted. The vulnerability is described in multiple records (NVD, CNVD) as an information disclosure issue; exploitation det...
SAP Redwood BPA Message Service crypto secret information disclosure
Application: SAP Redwood BPA Vendor URL: SAP Bugs: Information Disclosure Reported: 09.11.2017 Vendor response: 10.11.2017 Date of Public Advisory: 13.03.2018 Reference: SAP Security Note 2596535 Author: Mathieu Geli ERPScan DESCRIPTION An anonymous network attacker can forge valid packets that a...
Update Rollup 3 for Windows Server 2012 Essentials
Update Rollup 3 for Windows Server 2012 Essentials Introduction This article lists the issues that are fixed in Update Rollup 3 for Windows Server 2012 Essentials. Important This update rollup contains server-side fixes. After you apply this update rollup, the client-side package is installed...
[BTCrack v1.1] The worlds first Bluetooth Pass phrase (PIN) Bruteforce Tool
BTCrack is the worlds first Bluetooth Pass phrase PIN bruteforce tool, BTCrack will bruteforce the Passkey and the Link key from captured pairing exchanges. BTcrack was demoed and realeased at Hack.lu 2007 and 23C3 in Berlin, the video of the presentation is available on Google Video . To capture...