5607 matches found
CVE-2014-3787
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration SAP CUA tables via unspecified vectors...
CVE-2014-3787: Exposure of Sensitive Information to an Unauthorized Actor
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration SAP CUA tables via unspecified vectors...
SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS
Application: SAP NetWeaver Dispatcher Versions Affected: SAP KERNEL 7.00 32BIT, disp+work.exe 7000.52.12.34966 SAP KERNEL 7.20 64BIT, disp+work.exe 7200.117.19.50294 Vendor URL: Bugs: Buffer overflow CWE-119 CVSS according to ERPScan: AV:N/AC:H/Au:S/C:C/I:C/A:C 7.1 CVSS according to SAP:...
CVE-2014-3129
The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3133
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
Design/Logic Flaw
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
Design/Logic Flaw
The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...
Design/Logic Flaw
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3133
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
CVE-2014-3129
CVE-2014-3129 relates to SAP NetWeaver’s Software Lifecycle Manager (SLM) Java Server Pages, where the JSP component handles a crafted request that can lead to information disclosure. Affected product area is SAP Solution Manager 7.1. The description in the connected sources confirms an informati...
CVE-2014-3133
CVE-2014-3133 affects SAP NetWeaver Java Application Server. The issue is improper access restriction that allows remote attackers to retrieve the list of SAP systems registered on an SLD via an unspecified Web Dynpro component, related to SystemSelection. The vulnerability implies information di...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3130
Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.
PT-2014-5108
Name of the Vulnerable Software and Affected Versions SAP Netweaver Java Application Server affected versions not specified Description The issue is related to improper access restriction in the SAP Netweaver Java Application Server, allowing remote attackers to obtain the list of SAP systems...
PT-2014-5104
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified SAP Solution Manager version 7.1 Description The issue allows remote attackers to obtain sensitive information via a crafted request to the Java Server Pages in the Software Lifecycle Manager SLM i...
CVE-2014-3129: Exposure of Sensitive Information to an Unauthorized Actor
The Java Server Pages in the Software Lifecycle Manager SLM in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1...
CVE-2014-3130: Undefined Security Weakness
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3133: Undefined Security Weakness
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
PT-2014-5105
Name of the Vulnerable Software and Affected Versions SAP Netweaver ABAP Application Server affected versions not specified Description The issue concerns the ABAP Help documentation and translation tools BC-DOC-HLP in SAP Netweaver ABAP Application Server, where access is not properly restricted...