The vulnerability of the eDocument Cockpit component of the SAP Electronic Invoicing for Brazil software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the eDocument Cockpit component of the SAP Electronic Invoicing for Brazil software relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

OESA-2024-1094 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

PT-2024-1279

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with...

The vulnerability of the Cockpit component in the SAP Business One resource management system and the SAP HANA database management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Cockpit component in the SAP Business One resource management system and the SAP HANA database management system is related to deficiencies in the separation of controlled areas within the system. Exploiting this vulnerability could allow an attacker operating remotely to...

PT-2022-3954 · Sap · Sap Hana +1

Name of the Vulnerable Software and Affected Versions: SAP Business One and SAP HANA versions prior to 10.0 Description: The issue is related to insufficient access control in the Cockpit component of SAP Business One and SAP HANA systems, allowing a remote attacker to gain unauthorized access to...

CVE-2020-6856

An XML External Entity XEE vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders...