Lucene search
+L

9722 matches found

OSV
OSV
added 2023/12/12 10:15 a.m.11 views

CVE-2023-4932

SAS application is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in the program parameter of the the /SASStoredProcess/do endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a...

5.4CVSS5.8AI score0.00632EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/12 2:15 a.m.14 views

CVE-2023-49578

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS5.7AI score0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/12 2:15 a.m.32 views

Design/Logic Flaw

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

2.7CVSS7AI score0.0027EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 1:08 a.m.19 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS6.8AI score0.0027EPSS
SaveExploits0References2
CVE
CVE
added 2023/12/12 1:08 a.m.54 views

CVE-2023-49578

CVE-2023-49578 concerns SAP Cloud Connector 2.0. An authenticated, low-privilege user can trigger a Denial of Service from adjacent UI by sending a crafted malicious request, resulting in low availability impact and no effect on confidentiality or integrity. Several connected sources describe thi...

3.5CVSS3.9AI score0.0027EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/12 1:08 a.m.43 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS4.4AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7715 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7809 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7732 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.6 views

PT-2023-7792 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7719 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7839 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.5AI score0.00597EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7738 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7815 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.13 views

PT-2023-7898 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.6AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.16 views

PT-2023-7722 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7727 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.10 views

PT-2023-7812 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7813 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.4CVSS4.5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7713 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. It could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Rows per page
Query Builder