CVE-2015-2812

XML external entity XXE vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966...

CVE-2015-2815

Buffer overflow in the CSAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 7000.52.12.34966 and 7.40 7400.12.21.30308 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369...

CVE-2015-2811

CVE-2015-2811 describes an XXE vulnerability in SAP NetWeaver Portal’s ReportXmlViewer (SAP NetWeaver Portal 7.31.201109172004). The underlying issue is that the SAP XML parser validates all incoming XML requests with a user-specified DTD, enabling external entities to be processed. This can lead...

CVE-2015-2817

CVE-2015-2817 affects the SAP NetWeaver 7.40 SAP Management Console (CCMS) where an anonymous attacker can send a POST request to obtain information about SAP profile parameters via the ReadProfile interface. Root cause is information disclosure due to insufficient access control on the Managemen...

CVE-2015-2812

CVE-2015-2812 affects SAP NetWeaver Portal 7.31.201109172004, via XMLValidationComponent (parserXMLValidationComponent). The vulnerability is caused by the XML parser’s default handling of external entities (XXE), allowing a remote attacker to send crafted XML that can read internal resources or ...

CVE-2015-2815: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the CSAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 7000.52.12.34966 and 7.40 7400.12.21.30308 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369...

PT-2015-5907

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal version 7.31.201109172004 Description The issue allows remote attackers to send requests to intranet servers via crafted XML, exploiting an XML external entity XXE vulnerability in the XMLValidationComponent. Recommendatio...

CVE-2015-2812: Undefined Security Weakness

XML external entity XXE vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966...

PT-2015-5910

Name of the Vulnerable Software and Affected Versions SAP KERNEL versions 7.00 7000.52.12.34966 and 7.40 7400.12.21.30308 Description A buffer overflow issue exists in the C SAPGPARAM function within the NetWeaver Dispatcher, potentially allowing remote authenticated users to cause a denial of...

CVE-2015-2811: Undefined Security Weakness

XML external entity XXE vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939...

CVE-2015-2817: Exposure of Sensitive Information to an Unauthorized Actor

The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768...

PT-2015-5906

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Portal version 7.31.201109172004 Description The issue allows remote attackers to send requests to intranet servers via crafted XML. This is related to an XML external entity XXE vulnerability in ReportXmlViewer. Recommendations...

SAP NetWeaver AS ABAP XML External Entity Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications.SAP Netweaver AS ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language. An XML external...

CVE-2015-1309

XML external entity vulnerability in the Extended Computer Aided Test Tool eCATT in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATTDISPLAYXMLSTRINGREMOTE, aka SAP Note 2016638...

Xxe

XML external entity vulnerability in the Extended Computer Aided Test Tool eCATT in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATTDISPLAYXMLSTRINGREMOTE, aka SAP Note 2016638...

CVE-2015-1309

XML external entity vulnerability in the Extended Computer Aided Test Tool eCATT in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATTDISPLAYXMLSTRINGREMOTE, aka SAP Note 2016638...

CVE-2015-1309

The CVE-2015-1309 entry describes an XML External Entity (XXE) vulnerability in SAP NetWeaver AS ABAP, affecting the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier. The root cause is and was exposure to crafted XML requests that leverage ECATT_DISPLAY_XMLSTRIN...

PT-2015-5201 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 7.31 and earlier Description: The issue allows remote attackers to access arbitrary files via a crafted XML request. This is related to the ECATT DISPLAY XMLSTRING REMOTE function. Recommendations: For SAP...

CVE-2015-1309: Undefined Security Weakness

XML external entity vulnerability in the Extended Computer Aided Test Tool eCATT in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATTDISPLAYXMLSTRINGREMOTE, aka SAP Note 2016638...

SAP NetWeaver Dispatcher Buffer Overflow Vulnerability

SAP NetWeaver is an integrated application platform based on professional standards that significantly reduces the complexity of system integration. A buffer overflow vulnerability exists in SAP NetWeaver Dispatcher, which could be exploited by remote attackers to execute arbitrary code or to den...