5582 matches found
CVE-2013-5723: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0DELETEDERIVATIONTABLE."...
PT-2013-5755
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0 DELETE DERIVATION TABLE." Recommendations For SAP NetWeaver version 7.30, apply t...
SAP NetWeaver ECATT_DISPLAY_XMLSTRING_REMOTE - XXE
Application: SAP NetWeaver AS ABAP Versions Affected: SAP NetWeaver AS ABAP 7.31, probably others Vendor URL: http://www.sap.com Bugs: XML External Entity Reported: 09.07.2013 Vendor response: 10.07.2013 Date of Public Advisory: 20.01.2015 Reference: SAP Security Note 2016638 Authors: Nikolay...
SAP NetWeaver SHSTI_UPLOAD_XML - XXE
Application: SAP NetWeaver AS ABAP Versions Affected: SAP NetWeaver AS ABAP 7.31, probably others Vendor URL: Bugs: XML External Entity Exploits: YES Reported: 09.07.2013 Vendor response: 10.07.2013 Date of Public Advisory: 30.10.2013 Reference: SAP Security Note 1890819 CVSS:...
SAP NetWeaver SOAP Request SXPG_CALL_SYSTEM Command Execution
A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface...
CVE-2013-3319
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
CVE-2013-3319
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
CVE-2013-3319
CVE-2013-3319 affects SAP NetWeaver 7.03 via the HostControl service GetComputerSystem method, enabling remote disclosure of sensitive information through a crafted SOAP request to port 1128. Public references in Nessus note and vendor advisories (SAP Note 1816536) detail sensitive data exposure ...
PT-2013-4286
Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.03 Description The issue allows remote attackers to obtain sensitive information via a crafted SOAP request to the "TCP port 1128" endpoint, specifically targeting the GetComputerSystem method in the HostControl service...
CVE-2013-3319: Exposure of Sensitive Information to an Unauthorized Actor
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128...
SAP NetWeaver SOAP Request SXPG_COMMAND_EXECUTE Command Execution
A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface. The vulnerability is due to insufficient validation of incoming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted SOAP request to the affected...
SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution
Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...
SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution
Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...
SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution
Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...
SAP NetWeaver SOAP RFC SXPG_COMMAND_EXECUTE Command Execution
Added: 07/03/2013 BID: 55084 OSVDB: 93536 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain externa...
SAP NetWeaver SOAP RFC SXPG_CALL_SYSTEM Command Execution
Added: 06/03/2013 OSVDB: 93537 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain external operating...
SAP NetWeaver SOAP RFC SXPG_CALL_SYSTEM Command Execution
Added: 06/03/2013 OSVDB: 93537 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain external operating...
SAP NetWeaver SOAP RFC SXPG_CALL_SYSTEM Command Execution
Added: 06/03/2013 OSVDB: 93537 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain external operating...
SAP NetWeaver SOAP RFC SXPG_CALL_SYSTEM Command Execution
Added: 06/03/2013 OSVDB: 93537 Background SAP NetWeaver is a technology platform for building and integrating SAP business applications. Remote Function Call RFC is the standard SAP interface for communication between SAP systems. Transaction SM69 is used to create and maintain external operating...