SAP NetWeaver 7.4 - cryptographic issues

Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: cryptographic issues Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2191290 Author: Vahagn Vardanyan ERPScan VULNERABILITY...

SAP NetWeaver 7.4 (Pmitest servlet) - XSS vulnerability

Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: XSS Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2234918 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...

Multiple Cross-Site Scripting Vulnerabilities in SAP NetWeaver Business Client

SAP NetWeaver Business Client NWBC is a new-generation SAP client from SAP, which provides users with a single-sign-on entry point to SAP applications through a single user interface and serves as a browsing tool for applications such as SAP BSP, Web Dynpro and Portal. A cross-site scripting...

CVE-2014-9569

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

CVE-2014-9569

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

CVE-2014-9569

CVE-2014-9569 affects SAP NetWeaver Business Client (NWBC) for HTML 3.0. The vulnerability is a cross-site scripting (XSS) issue in NWBC HTML 3.0, exploitable by remote attackers via the title or roundtrips parameters, enabling injection of arbitrary web script/HTML. Documents consistently refere...

CVE-2014-9569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

PT-2015-4279 · Sap · Sap Netweaver Business Client (Nwbc) For Html

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Client NWBC for HTML version 3.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to multiple cross-site scripting XSS vulnerabilities. This is achieved by injecting...

SAP Netweaver Enqueue Server - Denial of Service

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID:...

CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-0995

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

Sql injection

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-0995

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

CVE-2014-8663

CVE-2014-8663 - A SQL injection vulnerability affecting SAP NetWeaver Business Warehouse, specifically the Data Basis (BW-WHM-DBA) component. The root cause is an SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability denotes t...

CVE-2014-0995

SAP NetWeaver Enqueue Server (Standalone Enqueue Server) is affected. Specifically, SAP NetWeaver 7.01 and 7.20 (and earlier) expose a denial-of-service vulnerability triggered by a crafted Trace Pattern with wildcards, causing uncontrolled recursion and a crash. The vulnerability affects the Sta...

CVE-2014-8663

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

PT-2014-4008

Name of the Vulnerable Software and Affected Versions SAP Netweaver versions 7.20, 7.01, and earlier Description The issue allows remote attackers to cause a denial of service, resulting in uncontrolled recursion and crash, by utilizing a trace level with a wildcard in the Trace Pattern...