Lucene search
+L

24 matches found

RedhatCVE
RedhatCVE
•added 2026/06/10 2:59 a.m.•23 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/09 1:16 a.m.•26 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS0.00349EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/09 12:21 a.m.•12 views

CVE-2026-44754

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00349EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•27 views

PT-2026-47537

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.5AI score0.00349EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•0 views

CVE-2026-44754: Missing Authorization

The Remote Function Call RFC modules of the Operational Data Provisioning Data Replication API ODP-RFC are missing caller identification of permitted SAP-internal applications and are being used by customer or third-party applications in ways that are not aligned with its intended usage. Which...

6.6CVSS5.9AI score0.00349EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2016-5024

Malware in sbrugna...

7.5CVSS7.5AI score0.00956EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2016-5023

Malware in sbrugna...

7.5CVSS7.6AI score0.01259EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-30747

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.0033EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:56 a.m.•18 views

CVE-2024-33002

Document Service handler obsolete in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability with low impact on Confidentiality and Integrity of the application...

6.1CVSS6AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 4:17 p.m.•24 views

CVE-2024-33002

Document Service handler obsolete in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability with low impact on Confidentiality and Integrity of the application...

6.1CVSS6.1AI score0.0033EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/14 3:49 a.m.•56 views

CVE-2024-33002

CVE-2024-33002 concerns the SAP Data Provisioning Service, specifically the Document Service handler, where user-supplied inputs are not sufficiently encoded, enabling Cross-Site Scripting (XSS). The vulnerability is described as having low impact on confidentiality and integrity. Several connect...

6.1CVSS6AI score0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/14 3:49 a.m.•13 views

CVE-2024-33002 Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)

Document Service handler obsolete in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability with low impact on Confidentiality and Integrity of the application...

6.1CVSS6AI score0.0033EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/14 3:49 a.m.•42 views

CVE-2024-33002 Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)

Document Service handler obsolete in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability with low impact on Confidentiality and Integrity of the application...

6.1CVSS6.2AI score0.0033EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•1 views

CVE-2024-33002: Improper Neutralization of Input During Web Page Generation

Document Service handler obsolete in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability with low impact on Confidentiality and Integrity of the application...

6.1CVSS5.9AI score0.0033EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•14 views

PT-2024-25049 · Unknown · Data Provisioning Service

Name of the Vulnerable Software and Affected Versions: Data Provisioning Service affected versions not specified Description: The issue is related to the Document Service handler in the Data Provisioning Service, which does not properly encode user-controlled inputs. This results in a Cross-Site...

6.1CVSS6.1AI score0.0033EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2016/05/05 12:00 a.m.•15 views

The vulnerability of the SAP HANA database management system allows attackers to obtain confidential information or enhance their privileges.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system arises from an improper restriction on access to the functions of the service. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or...

7.5CVSS7.2AI score0.00956EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/04/16 12:00 a.m.•16 views

SAP HANA Data Provisioning Agent Component Denial of Service Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. A security vulnerability exists in the DP Agent component of SAP HANA that allows remote attackers to submit special requests...

7.5CVSS6.7AI score0.01259EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/04/16 12:00 a.m.•17 views

SAP HANA Data Provisioning Agent Component Information Disclosure Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. The DP Agent component of SAP HANA fails to properly restrict the use of service functions, allowing remote attackers to...

7.5CVSS6.8AI score0.00956EPSS
SaveExploits0References1
NVD
NVD
•added 2016/04/14 2:59 p.m.•29 views

CVE-2016-4017

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

7.5CVSS7.4AI score0.01259EPSS
SaveExploits0References1
NVD
NVD
•added 2016/04/14 2:59 p.m.•22 views

CVE-2016-4018

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

7.5CVSS7.2AI score0.00956EPSS
SaveExploits0References1
Rows per page
Query Builder