9 matches found
CVE-2025-42888
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability...
EUVD-2025-1486
Malicious code in bioql PyPI...
CVE-2024-4105
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw Reflected XSS that allows the execution of malicious scripts. Therefore, if a client PC with inadequate security measures accesses a product UR...
CVE-2024-4105
CVE-2024-4105 affects Yokogawa FAST/TOOLS and CI Server. The issue is a reflected XSS in the WEB HMI server when processing HTTP requests, which could allow a malicious script to execute in a client browser. Affected products/versions: FAST/TOOLS RVSVRN/UNSVRN/HMIWEB/FTEES/HMIMOB (R9.01–R10.04) a...
CVE-2024-4105
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw Reflected XSS that allows the execution of malicious scripts. Therefore, if a client PC with inadequate security measures accesses a product UR...
PT-2021-14516
Name of the Vulnerable Software and Affected Versions SAP GUI for Windows version 7.60 Description The issue allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PC's memory. Under certain conditions, the attacker can access information that woul...
PT-2014-4735
Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Web client PC in the Oracle Agile Product Collaboration...
CVE-2014-2492: Undefined Security Weakness
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Web client PC...
