CVE-2014-1961

Technical details (affected software/versions, exploit info) are not provided in the supplied documents. Monitor for updates regarding CVE-2014-1961 from SAP NetWeaver's Portal WebDynPro vulnerability.

CVE-2014-1961

Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...

CVE-2014-1964

Cross-site scripting XSS vulnerability in the Integration Repository in the SAP Exchange Infrastructure BC-XI component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error...

CVE-2014-1963

Technical details about CVE-2014-1963 are not publicly provided in the supplied documents. The records mention a denial-of-service in SAP NetWeaver 7.20 but do not disclose affected components, exploitation methods, or patches. Monitor for updates.

CVE-2014-1965

Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...

SAP NetWeaver - SMB Relay

Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2077260 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...

SAP NetWeaver - SMB Relay

Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...

CVE-2013-7094

SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-7094

CVE-2013-7094 : A SQL injection vulnerability exists in the RSDDCVER_COUNT_TAB_COLS function of SAP NetWeaver 7.30. Remote attackers can potentially execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected product/version and vulnerable component; no ex...

CVE-2013-7094

SQL injection vulnerability in the RSDDCVERCOUNTTABCOLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

SAP NetWeaver 'RSDDCVER_COUNT_TAB_COLS()'函数SQL注入漏洞

BUGTRAQ ID: 64232 SAP NetWeaver是SAP的集成技术平台和自从SAP Business Suite以来的所有SAP应用的技术基础。 SAP NetWeaver 7.30版本的"RSDDCVERCOUNTTABCOLS"函数值没有被正确过滤即用在SQL查询内，成功利用后可导致操作SQL查询。 0 SAP NetWeaver 7.30 厂商补丁： SAP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sap.com/platform/netweaver/index.epx...

CVE-2013-6869

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6869

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6869

CVE-2013-6869 affects SAP NetWeaver 7.30, where a SQL injection in the SRTT_GET_COUNT_BEFORE_KEY_RFC function could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability’s impact is described as potentially partial confidentiality, integrity, and avai...

CVE-2013-6821

Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-6822

GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...

CVE-2013-6818

SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2013-6815

The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...