5582 matches found
CVE-2014-9569
Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...
CVE-2014-9569: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...
PT-2015-4279 · Sap · Sap Netweaver Business Client (Nwbc) For Html
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Client NWBC for HTML version 3.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to multiple cross-site scripting XSS vulnerabilities. This is achieved by injecting...
SAP Netweaver Enqueue Server - Denial of Service
No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID:...
CVE-2014-8663
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-0995
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
Sql injection
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-8663
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-0995
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
CVE-2014-0995
SAP NetWeaver Enqueue Server (Standalone Enqueue Server) is affected. Specifically, SAP NetWeaver 7.01 and 7.20 (and earlier) expose a denial-of-service vulnerability triggered by a crafted Trace Pattern with wildcards, causing uncontrolled recursion and a crash. The vulnerability affects the Sta...
CVE-2014-8663
CVE-2014-8663 - A SQL injection vulnerability affecting SAP NetWeaver Business Warehouse, specifically the Data Basis (BW-WHM-DBA) component. The root cause is an SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability denotes t...
CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-4008
Name of the Vulnerable Software and Affected Versions SAP Netweaver versions 7.20, 7.01, and earlier Description The issue allows remote attackers to cause a denial of service, resulting in uncontrolled recursion and crash, by utilizing a trace level with a wildcard in the Trace Pattern...
PT-2014-1951
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.40 Description The issue allows remote attackers to obtain sensitive information. This can be achieved via the ReadProfile parameters in the SAP Management Console. Additionally, the vulnerability exists due to a lack o...
CVE-2014-0995: Improper Input Validation
The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...
PT-2014-8669
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...
CVE-2014-8591
Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...
CVE-2014-8587
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm DSA signatures via unspecified vectors...