Lucene search
+L

137 matches found

OSV
OSV
added 2023/12/12 2:15 a.m.12 views

CVE-2023-49578

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS5.7AI score0.0027EPSS
SaveExploits0References2
NVD
NVD
added 2023/12/12 2:15 a.m.24 views

CVE-2023-49578

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/12 2:15 a.m.30 views

Design/Logic Flaw

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

2.7CVSS7AI score0.0027EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/12/12 1:08 a.m.49 views

CVE-2023-49578

CVE-2023-49578 concerns SAP Cloud Connector 2.0. An authenticated, low-privilege user can trigger a Denial of Service from adjacent UI by sending a crafted malicious request, resulting in low availability impact and no effect on confidentiality or integrity. Several connected sources describe thi...

3.5CVSS3.9AI score0.0027EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 1:08 a.m.14 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS6.8AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/12 1:08 a.m.40 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS4.4AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/11 12:00 a.m.10 views

PT-2023-31263 · Sap · Sap Cloud Connector

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector version 2.0 Description: The issue allows an authenticated user with low privilege to perform a Denial of Service attack from an adjacent UI by sending a malicious request. This leads to a low impact on the availability of...

3.5CVSS7.1AI score0.0027EPSS
SaveExploits0References8
Citrix
Citrix
added 2023/10/13 12:00 a.m.12 views

Nutanix power actions failure after the windows patches on Cloud Connector

Following a Windows patch to Cloud Connectors, power actions, and autoscale actions are failing to Nutanix-hosted VDAs. You can see failures relating to the Citrix Remote Broker Provider service, and the Nutanix PlugIn on the Cloud Connectors event logs, XaXdProxy crash linked to the broker...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2022/05/23 12:00 a.m.71 views

SAP Cloud Connector Cross-Site Scripting Vulnerability

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. A cross-site scripting vulnerability exists in SAP Cloud Connector version 2.0, which arises from a program that does not adequately encode user-controlled input, and can be exploited by an attacker with...

5.9CVSS4.9AI score0.00465EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/05 12:00 a.m.54 views

SAP Cloud Connector Trust Management Issue Vulnerability

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. SAP Cloud Connector 2.0 suffers from a trust management issue vulnerability that stems from SAP Cloud Connector being able to communicate with the backend without sufficiently validating certificates. An...

9.1CVSS9.2AI score0.00559EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/25 12:00 a.m.44 views

SAP Cloud Connector Path Traversal Vulnerability

SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...

7.5CVSS7.7AI score0.0117EPSS
SaveExploits0References1
Citrix
Citrix
added 2022/03/24 12:00 a.m.10 views

VDA not registered with the cloud connector Clock sync error

The VDA logon server reaching to different Geo Domain controller...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2022/01/12 12:00 a.m.16 views

Connector Install Failed - A clean install of the new Citrix Cloud Connector is required

Error during Connector install/setup: A clean install of the new Citrix Cloud Connector is required...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2021/12/11 5:15 p.m.273 views

Citrix Security Advisory for CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832.

Citrix is aware offourvulnerabilitiesaffectingApache Log4j2, threeof whichmayallowan attackertoexecute arbitrary code. Thesethreevulnerabilitieshavebeen given the followingidentifiers: CVE-2021-44228 CVE-2021-45046 CVE-2021-44832 Thefourthvulnerabilitymay allowan attackertocause a denial of...

10CVSS2.9AI score0.99999EPSS
SaveExploits371
VMware
VMware
added 2021/12/10 12:00 a.m.157 views

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

9.3CVSS0.4AI score0.99999EPSS
SaveExploits371References4Affected Software55
OSV
OSV
added 2021/09/15 7:15 p.m.11 views

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

7.5CVSS6.3AI score0.0117EPSS
SaveExploits0References2
NVD
NVD
added 2021/09/15 7:15 p.m.31 views

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

7.5CVSS0.0117EPSS
SaveExploits0References2
NVD
NVD
added 2021/09/15 7:15 p.m.34 views

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

7.7CVSS0.0054EPSS
SaveExploits0References2
NVD
NVD
added 2021/09/15 7:15 p.m.19 views

CVE-2021-33695

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate...

9.1CVSS0.00559EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/15 7:15 p.m.9 views

CVE-2021-33695

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate...

9.1CVSS5.8AI score0.00559EPSS
SaveExploits0References2
Rows per page
Query Builder