72 matches found
The vulnerability of the SICF-processor SRM catalog for SAP Supplier Relationship Management allows a perpetrator to perform cross-site scripting attacks.
The vulnerability of the SICF-processor in the SRM-catalog application for SAP Supplier Relationship Management automation involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions, allowing attackers to circumvent existing security restrictions.
The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
SAP NetWeaver AS Missing Authentication (December 2025)
The version of SAP NetWeaver Application Server detected on the remote host is affected by a missing authentication vulnerability as disclosed in the SAP Security Patch Day December 2025: - The SAP Internet Communication Framework does not conduct any authentication checks for features that need...
EUVD-2025-201852
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the...
CVE-2025-42875 Missing Authentication check in SAP NetWeaver Internet Communication Framework
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the...
CVE-2025-42875
CVE-2025-42875 relates to the SAP NetWeaver/Internet Communication Framework where authentication checks are missing for features needing user identification, enabling reuse of authorization tokens. The issue, described across multiple feeds, indicates a vulnerability in SAP’s web/EC framework th...
CVE-2025-42875: Missing Authentication for Critical Function
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the...
SAP Internet Communication Framework 访问控制错误漏洞
SAP Internet Communication Framework is an Internet communication architecture from SAP, Germany. An access control error vulnerability exists in SAP Internet Communication Framework, which stems from a lack of authentication checks that could lead to the reuse of authorization tokens...
EUVD-2022-44778
Malicious code in bioql PyPI...
EUVD-2023-38264
Malicious code in bioql PyPI...
EUVD-2022-43489
Malicious code in bioql PyPI...
EUVD-2021-27672
Malicious code in bioql PyPI...
EUVD-2025-19419
Malicious code in bioql PyPI...
EUVD-2023-23919
Malicious code in bioql PyPI...
EUVD-2023-23923
Malicious code in bioql PyPI...
CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework TCF interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution...
CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework TCF interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution...
CVE-2025-5310 Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework TCF interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution...