EUVD-2016-4988

Malware in sbrugna...

EUVD-2016-4989

Malware in sbrugna...

Design/Logic Flaw

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4015

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

CVE-2016-4015

CVE-2016-4015 is a DoS vulnerability in the SAP NetWeaver JAVA AS Enqueue Server. A crafted request in Enqueue Server (affecting SAP NetWeaver Enqueue Server 7.4 and likely earlier 7.1–7.4) can crash the process, enabling remote attackers to deny service. The issue is documented with SAP Security...

CVE-2016-4014: Undefined Security Weakness

XML external entity XXE vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service system hang via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389...

CVE-2016-4015: Undefined Security Weakness

The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted request, aka SAP Security Note 2258784...

PT-2016-1705

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS versions 7.1 through 7.4 Description The issue is related to errors in the code of the Enqueue Server component in SAP NetWeaver. It allows remote attackers to cause a denial of service, specifically a process crash, via ...

PT-2016-1706

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA AS 7.4 Description The issue is related to an XML external entity XXE vulnerability in the UDDI component, which is caused by incorrect restriction of XML links to external objects. This can be exploited by a remote attacker...

CVE-2016-3980

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3979

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

CVE-2016-3979

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

CVE-2016-3979

CVE-2016-3979 (SAP NetWeaver AS JAVA ICM/ICM) : A denial-of-service vulnerability in the Internet Communication Manager (ICMAN/ICM) component affects SAP NetWeaver AS JAVA 7.2–7.4. According to connected sources, a remote attacker can cause a heap memory corruption and process crash by sending a ...

CVE-2016-3980

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3980: Improper Input Validation

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3979: Improper Input Validation

Internet Communication Manager aka ICMAN or ICM in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185...

PT-2016-5790

Name of the Vulnerable Software and Affected Versions SAP JAVA AS versions 7.2 through 7.4 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via a crafted HTTP request. Recommendations For SAP JAVA AS versions 7.2 through 7.4, update to a...

PT-2016-5789

Name of the Vulnerable Software and Affected Versions SAP JAVA AS versions 7.2 through 7.4 Description The issue allows remote attackers to cause a denial of service, resulting in heap memory corruption and process crash, via a crafted HTTP request. This is related to the IctParseCookies function...

CVE-2016-3974

XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...

Security feature bypass

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...