CVE-2020-26824

CVE-2020-26824 affects SAP Solution Manager (JAVA stack) version 7.20. The vulnerability is due to missing authorization checks in the Upgrade Legacy Ports Service, allowing an unauthenticated attacker to compromise the system and impacting both integrity and availability. Public disclosures in m...

CVE-2020-26822

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service...

SAP HCM Travel Management Elevation of Privilege Vulnerability

SAP HCM Travel Management is a travel management module from SAP. A security vulnerability exists in SAP HCM Travel Management that stems from a lack of authorization checks in the program. An attacker could exploit the vulnerability to elevate privileges...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

Authorization Bypass

PostgreSQL is vulnerable to authorization bypass. The vulnerability exists as the ALTER ... DEPENDS ON extension is missing authorization checks...

SAP Host Agent Authorization Issues Vulnerability

SAP Host Agent is a Miscellaneous Shareware software developed by ISAP AG. SAP Host Agent suffers from an authorization issue vulnerability that stems from a lack of authorization checks. An attacker could exploit this vulnerability to obtain sensitive information...

CVE-2019-0383

Transaction Management in SAP Treasury and Risk Management corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privilege...

SAP NetWeaver ABAP Server Unauthorized Access Vulnerability

SAP Netweaver is the German SAP company's set of service-oriented integrated application platform, the platform is mainly for SAP applications to provide a development and runtime environment, ABAP Server is a run in NetWeaver and based on the ABAP high-level programming language application...

SAP Enterprise Financial Services Elevation of Privilege Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A security vulnerability exists in SAP Enterprise Financial Services, which arises from the program's failure to perform required authorization checks on authenticated users. An attacker could exploit...

Cisco IOS ntp Subsystem Unauthorized Access Vulnerability (cisco-sa-20160419-ios)

A vulnerability in the ntp subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to mobilize ntp associations. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco IOS and Cisco IOS XE ntp Subsystem Unauthorized Access Vulnerability

A vulnerability in the ntp subsystem of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to mobilize ntp associations. The vulnerability is due to missing authorization checks on certain ntp packets. An attacker could exploit this vulnerability by ingressing...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...