5589 matches found
CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1961
Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...
CVE-2014-1964
CVE-2014-1964 is an XSS vulnerability in the SAP NetWeaver Integration Repository (BC-XI) component of SAP Exchange Infrastructure. The issue affects the Integration Repository via the ESR application and a DIR error, enabling remote attackers to inject arbitrary web script or HTML. The NVD notes...
CVE-2014-1963
Technical details about CVE-2014-1963 are not publicly provided in the supplied documents. The records mention a denial-of-service in SAP NetWeaver 7.20 but do not disclose affected components, exploitation methods, or patches. Monitor for updates.
CVE-2014-1960
CVE-2014-1960 affects SAP NetWeaver Solution Manager. The root cause is insufficient access restriction that allows remote information disclosure via unspecified vectors. Documented impact is partial confidentiality (CVSS2 base 5.0). Exploitation details are not provided in the sources. Remediati...
CVE-2014-1965
Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...
CVE-2014-1964
Cross-site scripting XSS vulnerability in the Integration Repository in the SAP Exchange Infrastructure BC-XI component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error...
PT-2014-4384
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue allows remote attackers to obtain sensitive path information. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2014-1963: Undefined Security Weakness
Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors...
PT-2014-4383
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the Solution Manager in SAP NetWeaver, which does not properly restrict access. This allows remote attackers to obtain sensitive information via unspecified...
PT-2014-4387
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability in the Integration Repository of the SAP Exchange Infrastructure BC-XI component. This vulnerability allows remote...
CVE-2014-1960: Undefined Security Weakness
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1965: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...
PT-2014-4388
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 3.0, 7.00 through 7.02, 7.10 through 7.11 Description The issue is related to a cross-site scripting XSS vulnerability in the ISpeakAdapter component of the SAP Exchange Infrastructure. This vulnerability allows remote...
CVE-2014-1961: Undefined Security Weakness
Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...
PT-2014-4386
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.20 Description The issue is related to an unspecified vulnerability in the Message Server component, allowing remote attackers to cause a denial of service. The attack vectors are unknown. Recommendations For SAP...
CVE-2014-1964: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Integration Repository in the SAP Exchange Infrastructure BC-XI component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2077260 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
