CVE-2020-6190

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

CVE-2020-6190

CVE-2020-6190 affects SAP NetWeaver AS Java (Heap Dump Application). Vulnerable endpoints in versions 7.30, 7.31, 7.40, 7.50 can disclose system information such as hostname, server node, and installation path. The underlying impact is information disclosure. The provided documents describe the a...

CVE-2020-6187

SAP NetWeaver (Guided Procedures) is affected in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 by a vulnerability where XML input from a compromised admin is not sufficiently validated, enabling Denial of Service. The CVE entry documents the root cause as inadequate validation of XML docu...

CVE-2020-6187

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6193

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6193

The CVE-2020-6193 entry concerns SAP NetWeaver Knowledge Management ICE Service. Affected products/versions are SAP NetWeaver Knowledge Management ICE Service from 7.30, 7.31, 7.40, 7.50. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability exploitable by an unauthenticated attacker....

The vulnerability of the SAP NetWeaver Internet Communication Manager web application lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the SAP NetWeaver Internet Communication Manager web application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2011-1517

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

Remote code execution

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

CVE-2011-1517

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

CVE-2011-1517

CVE-2011-1517 affects SAP NetWeaver Dispatcher (disp+work.exe) on SAP NetWeaver 7.0. The issue arises from the DiagTraceHex() function; a remote attacker can send a specially crafted network packet to trigger a denial of service (and in the broader advisory context, related vulnerabilities enable...

The vulnerability of SAP NetWeaver Java Application Server web applications, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2013-1593

A Denial of Service vulnerability exists in the WRITEC function in the msgserver.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN...

Denial of service

A Denial of Service vulnerability exists in the WRITEC function in the msgserver.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN...

CVE-2013-1593

CVE-2013-1593 is a Denial of Service vulnerability in SAP NetWeaver Message Server (msg_server.exe) affecting SAP NetWeaver 2004s and 7.01 SR1, 7.02 SP06, 7.30 SP04. The issue arises in the WRITE_C function when processing specially crafted SAP Message Server packets directed at TCP ports 36NN/39...

CVE-2013-1593

A Denial of Service vulnerability exists in the WRITEC function in the msgserver.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN...

CVE-2013-1592

A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user...

Buffer overflow

A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user...

CVE-2013-1592

A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user...

CVE-2013-1592

SAP NetWeaver Message Server contains CVE-2013-1592 (and related CVE-2013-1593) buffer-overflow vulnerabilities in the Message Server module. The flaw resides in _MsJ2EE_AddStatistics(), where the attacker-controlled MSJ2EE_HEADER.serviceid is used to index the global j2ee_stat_services array wit...