CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

Authorization Bypass

PostgreSQL is vulnerable to authorization bypass. The vulnerability exists as the ALTER ... DEPENDS ON extension is missing authorization checks...

SAP Host Agent Authorization Issues Vulnerability

SAP Host Agent is a Miscellaneous Shareware software developed by ISAP AG. SAP Host Agent suffers from an authorization issue vulnerability that stems from a lack of authorization checks. An attacker could exploit this vulnerability to obtain sensitive information...

CVE-2019-0383

Transaction Management in SAP Treasury and Risk Management corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privilege...

SAP NetWeaver ABAP Server Unauthorized Access Vulnerability

SAP Netweaver is the German SAP company's set of service-oriented integrated application platform, the platform is mainly for SAP applications to provide a development and runtime environment, ABAP Server is a run in NetWeaver and based on the ABAP high-level programming language application...

CVE-2019-0258: Missing Authorization

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

PT-2019-10716

Name of the Vulnerable Software and Affected Versions SAP Enterprise Financial Services versions prior to SAPSCORE 1.13 SAP Enterprise Financial Services versions prior to S4CORE 1.01 SAP Enterprise Financial Services versions prior to EA-FINSERV 1.10 SAP Enterprise Financial Services versions...

CVE-2018-2455: Missing Authorization

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 in business function EAFSBCABUSOPRSEPA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2454: Missing Authorization

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 in business function EAFSBCABUSOPR2 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

PT-2018-6551

Name of the Vulnerable Software and Affected Versions: Pleasant Password Server versions prior to 7.8.3 Description: The issue arises from missing authorization checks, allowing any authenticated user to list, upload, or delete attachments to password safe entries. To perform these actions, a use...

SAP Enterprise Financial Services Elevation of Privilege Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A security vulnerability exists in SAP Enterprise Financial Services, which arises from the program's failure to perform required authorization checks on authenticated users. An attacker could exploit...

CVE-2018-2413: Missing Authorization

SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Cisco IOS ntp Subsystem Unauthorized Access Vulnerability (cisco-sa-20160419-ios)

A vulnerability in the ntp subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to mobilize ntp associations. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco IOS and Cisco IOS XE ntp Subsystem Unauthorized Access Vulnerability

A vulnerability in the ntp subsystem of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to mobilize ntp associations. The vulnerability is due to missing authorization checks on certain ntp packets. An attacker could exploit this vulnerability by ingressing...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...