Multiple Cross-Site Scripting Vulnerabilities in SAP NetWeaver Business Client

SAP NetWeaver Business Client NWBC is a new-generation SAP client from SAP, which provides users with a single-sign-on entry point to SAP applications through a single user interface and serves as a browsing tool for applications such as SAP BSP, Web Dynpro and Portal. A cross-site scripting...

CVE-2014-9569

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

CVE-2014-9569

CVE-2014-9569 affects SAP NetWeaver Business Client (NWBC) for HTML 3.0. The vulnerability is a cross-site scripting (XSS) issue in NWBC HTML 3.0, exploitable by remote attackers via the title or roundtrips parameters, enabling injection of arbitrary web script/HTML. Documents consistently refere...

CVE-2014-9569

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

PT-2015-4279 · Sap · Sap Netweaver Business Client (Nwbc) For Html

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Client NWBC for HTML version 3.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to multiple cross-site scripting XSS vulnerabilities. This is achieved by injecting...

SAP Netweaver Enqueue Server - Denial of Service

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID:...

CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-0995

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

Sql injection

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-0995

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

CVE-2014-8663

CVE-2014-8663 - A SQL injection vulnerability affecting SAP NetWeaver Business Warehouse, specifically the Data Basis (BW-WHM-DBA) component. The root cause is an SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability denotes t...

CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-0995

SAP NetWeaver Enqueue Server (Standalone Enqueue Server) is affected. Specifically, SAP NetWeaver 7.01 and 7.20 (and earlier) expose a denial-of-service vulnerability triggered by a crafted Trace Pattern with wildcards, causing uncontrolled recursion and a crash. The vulnerability affects the Sta...

CVE-2014-8590

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8587

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8591

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

Code injection

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

Xxe

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

Code injection

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...