185 matches found
CVE-2020-6192
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...
PT-2020-18994
Name of the Vulnerable Software and Affected Versions SAP Landscape Management version 3.0 Description The issue allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...
PT-2020-18986
Name of the Vulnerable Software and Affected Versions SAP Host Agent version 7.21 Description The issue allows an unprivileged user to read or write to the shared memory by sending a request to the main SAPOSCOL process. This can lead to the user receiving responses that contain data read with ro...
PT-2020-18995
Name of the Vulnerable Software and Affected Versions SAP Landscape Management version 3.0 Description The issue allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management. Recommendations For SAP Landscape Management...
CVE-2020-6191: Improper Input Validation
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...
CVE-2020-6186: Missing Authentication for Critical Function
SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of Service...
PT-2020-18989
Name of the Vulnerable Software and Affected Versions SAP Host Agent version 7.21 Description The issue allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of Service. Recommendations For SAP Host Agent...
CVE-2020-6192: Improper Input Validation
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...
CVE-2020-6183: Missing Authorization
SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sending request to the main SAPOSCOL process and receive responses that may contain data read with user root privileges e.g. size of any directory, system hardware and OS details,...
DELTA - SDN Security Evaluation Framework
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
Unspecified Denial of Service Vulnerability in SAP Host Agent
SAP Host Agent is the SAP host agent program. An unspecified denial of service vulnerability exists in SAP Host Agent. An attacker could exploit the vulnerability to cause a denial of service condition and deny service to legitimate users...
SAP Patches High-Risk Flaws in SAP POS, Host Agent
SAP fixed 23 vulnerabilities across roughly a dozen products on Tuesday, including a series of high-risk flaws that could allow an attacker to gain access to SAP POS, the company’s client/server point-of-sale PoS solution. The issues in SAP POS, a series of missing authorization checks, could let...
host-agent.de XSS vulnerability
Vulnerable URL: http://www.host-agent.de/whois/whois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check host-agent.de SSL...
SAP Hostcontrol unprotected web method / DOS
Application: SAP Host Agent Versions Affected: SAP Host Agent 7.21 Vendor URL: SAP Bugs: Missing Authentication Reported: 27.02.2017 Vendor response: 28.02.2017 Date of Public Advisory: 11.07.2017 Reference: SAP Security Note 2442993 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class:...
SDN Security Evaluation Framework: DELTA
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
CVE-2014-8592
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...
Cross site request forgery (csrf)
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...
CVE-2014-8592
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...
CVE-2014-8592
Technical details are not publicly available in the provided documents for CVE-2014-8592. Monitor for updates.
CVE-2014-8592: Undefined Security Weakness
Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...