SAP Data Services Cross-Site Request Forgery Vulnerability

SAP Data Services is a set of enterprise data management software from Germany's SAP. The software supports the processing of structured and unstructured data, and supports data conversion, cleaning and matching functions. A cross-site request forgery vulnerability exists in SAP Data Services. An...

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

Cross site request forgery (csrf)

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

CVE-2020-6206

CVE-2020-6206 affects SAP Cloud Platform Integration for Data Services 1.0. The issue is that user inputs can be reflected as error or warning messages, which could mislead victims into following malicious instructions and enable Cross-Site Request Forgery. The connected records confirm this CSRF...

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

CVE-2020-6206: Cross-Site Request Forgery (CSRF)

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

PT-2020-19007

Name of the Vulnerable Software and Affected Versions SAP Cloud Platform Integration for Data Services version 1.0 Description The issue allows user inputs to be reflected as error or warning messages, potentially misleading victims into following malicious instructions inserted by external...

jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using blaze classes. An attacker could use this flaw to execute arbitrary code...

Cisco Unified Communications Manager UDS DoS

The vulnerability of the User Data Services UDS software interface of the Cisco Unified Communications Manager Unified CM platform is related to insufficient validation of entered data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially...

CVE-2019-1837

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

CVE-2019-1837 Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

SAP Data Services Cross-Site Scripting Vulnerability

SAP Data Services is a set of enterprise data management software from Germany's SAP. The software supports the processing of structured and unstructured data, and supports data conversion, cleaning and matching functions. A cross-site scripting vulnerability in Impact and Lineage Analysis in SAP...

Cross site scripting

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

CVE-2018-2466

CVE-2018-2466 affects SAP Data Services (Impact and Lineage Analysis) v4.2, where the management console fails to sufficiently validate user-controlled inputs, enabling a Cross-Site Scripting (XSS) vulnerability. Documented impact indicates browser-level script execution potential when malicious ...

PT-2018-15582

Name of the Vulnerable Software and Affected Versions SAP Data Services version 4.2 Description The management console in SAP Data Services does not sufficiently validate user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Recommendations For version 4.2, consider implementing...

CVE-2018-2466: Improper Neutralization of Input During Web Page Generation

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

Wireless Data Service module Data Compromise

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services operating system in Android is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...