CVE-2013-3243

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

CVE-2013-3243: Undefined Security Weakness

Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors...

PT-2013-4249

Name of the Vulnerable Software and Affected Versions OpenText/IXOS ECM for SAP NetWeaver affected versions not specified Description The issue allows remote attackers to execute arbitrary ABAP code. Recommendations At the moment, there is no information about a newer version that contains a fix...

CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

Xxe

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

PT-2013-5979

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.31 and earlier Description The issue allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

CVE-2013-6244

The CVE-2013-6244 issue affects SAP NetWeaver 7.31 and earlier, in the Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP). The root cause is an XML External Entity (XXE) vulnerability where an XML document containing an external entity declaration and an entity ref...

CVE-2013-6244: Undefined Security Weakness

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

SAP NetWeaver Message Server – DoS

Application: SAP NetWeaver Message Server Versions Affected: SAP KERNEL 7.20 32BIT Vendor URL: http://www.sap.com Bugs: Improper Input Validation Exploits: PoC Reported: 10.07.2013 Vendor response: 11.07.2013 Date of Public Advisory: 25.01.2014 Reference: SAP Security Note 1773912 Author: George...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5751

The CVE-2013-5751 entry describes a directory traversal vulnerability in SAP NetWeaver 7.x that could allow remote attackers to read arbitrary files via unspecified vectors. Connected sources confirm the affected product (SAP NetWeaver 7.x) and the vulnerability class (directory traversal), but d...

CVE-2013-5751

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

PT-2013-5766

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.x Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For SAP NetWeaver version 7.x, update to a version that includes a fix for this issue...

CVE-2013-5751: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

Sql injection

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

CVE-2013-5723

SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...

CVE-2013-5723

CVE-2013-5723 describes a SQL injection in SAP NetWeaver 7.30. The vulnerability affects SAP NetWeaver 7.30, where an attacker can remotely execute arbitrary SQL commands via an unspecified vector related to ABAD0_DELETE_DERIVATION_TABLE. The provided documents do not specify a concrete vulnerabl...