CVE-2014-0995: Improper Input Validation

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

CVE-2014-8591

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

CVE-2014-8587

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8590

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

Code injection

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

Code injection

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

Xxe

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8592

Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...

CVE-2014-8587

CVE-2014-8587 affects SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, used in SAP NetWeaver AS for ABAP and SAP HANA. The issue allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors. Remediation: upgrade SAPCRYPTOLIB to ...

CVE-2014-8590

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8590

CVE-2014-8590 is an XML external entity (XXE) vulnerability in the SAP NetWeaver Application Server (AS) Java Web Service Navigator. An attacker can remotely access arbitrary files by sending a crafted request. Affected product/component: SAP NetWeaver AS Java Web Service Navigator (Java). Root c...

CVE-2014-8587

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

PT-2014-8639

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.02 and 7.3 Description The issue allows remote attackers to cause a denial of service, resulting in process termination, via a crafted request. Recommendations For SAP NetWeaver version 7.02, update to a version that...

PT-2014-8634 · Sap · Sap Netweaver As Abap +4

Name of the Vulnerable Software and Affected Versions: SAPCRYPTOLIB versions prior to 5.555.38 SAPSECULIB affected versions not specified CommonCryptoLib versions prior to 8.4.30 Description: The issue allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified...

CVE-2014-8587: Undefined Security Weakness

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...

CVE-2014-8590: Undefined Security Weakness

XML external entity XXE vulnerability in the Web Service Navigator in SAP NetWeaver Application Server AS Java allows remote attackers to access arbitrary files via a crafted request...

CVE-2014-8591: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

CVE-2014-8592: Undefined Security Weakness

Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via a crafted request...

PT-2014-8637

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server AS Java affected versions not specified Description The issue is related to an XML external entity XXE vulnerability in the Web Service Navigator. This allows remote attackers to access arbitrary files by sendi...

PT-2014-1977

Name of the Vulnerable Software and Affected Versions SAP Netweaver versions prior to 7.01 Description The issue is related to an XML External Entity XXE vulnerability. It is caused by incorrect restriction of XML external entity references, allowing an authenticated remote attacker to read...