CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

Authentication flaw

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

Cross site scripting

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

Command injection

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

CVE-2021-33695

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate...

Design/Logic Flaw

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate...

CVE-2021-33694

CVE-2021-33694 affects SAP Cloud Connector version 2.0. The issue stems from insufficient encoding of user-controlled inputs, enabling an attacker with Administrator rights to inject code that is stored in the database and later executed in the application, resulting in a Stored Cross-Site Script...

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

CVE-2021-33693

CVE-2021-33693 affects SAP Cloud Connector, version 2.0. An authenticated administrator can modify a configuration file to inject malicious code, potentially enabling OS command execution. The issue arises from insecure config handling where the admin’s configuration changes can be abused to run ...

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

CVE-2021-33695

Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate...

CVE-2021-33695

CVE-2021-33695 affects SAP Cloud Connector 2.0, where backend communication may accept certificates with insufficient validation, creating a trust‑management risk and potential certificate authentication bypass. Multiple sources (NVD, Red Hat, CNVD/CNNVD) corroborate; exploitation status not spec...

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

CVE-2021-33692

SAP Cloud Connector (v2.0) contains a path traversal vulnerability exploited via uploaded backup ZIPs. The issue allows crafting backups containing sequences like .. and / to escape the restricted directory and access files or directories outside the intended location. Multiple connected sources ...

Cloud Connector on Sever 2019 STA Shows Down on Netscaler ADC 12.1

When using Microsoft Server 2019 with the Citrix Cloud Software and using Netscaler ADC 12.1, the Cloud Connectors will show as 'DOWN' for the Secure Ticket Authority STA...

SAP ERP 路径遍历漏洞

SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...