EUVD-2024-19724

Malicious code in bioql PyPI...

CVE-2024-22128

SAP NWBC for HTML - versions SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, SAPBASIS 700, SAPBASIS 701, SAPBASIS 702, SAPBASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An unauthenticated attacker can inject malicious javascript to...

CVE-2024-22128

SAP NWBC for HTML - versions SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, SAPBASIS 700, SAPBASIS 701, SAPBASIS 702, SAPBASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An unauthenticated attacker can inject malicious javascript to...

CVE-2024-22128

SAP NWBC for HTML - versions SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, SAPBASIS 700, SAPBASIS 701, SAPBASIS 702, SAPBASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An unauthenticated attacker can inject malicious javascript to...

Cross site scripting

SAP NWBC for HTML - versions SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, SAPUI 758, SAPBASIS 700, SAPBASIS 701, SAPBASIS 702, SAPBASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An unauthenticated attacker can inject malicious...

CVE-2024-22128

CVE-2024-22128 affects SAP NWBC for HTML. The issue is insufficient encoding of user-controlled inputs in versions SAP_UI 754–758 and SAP_BASIS 700–702, 731, enabling unauthenticated attackers to inject malicious JavaScript and impact confidentiality and integrity of application data after exploi...

CVE-2024-22128: Improper Neutralization of Input During Web Page Generation

SAP NWBC for HTML - versions SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, SAPBASIS 700, SAPBASIS 701, SAPBASIS 702, SAPBASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An unauthenticated attacker can inject malicious javascript to...

PT-2024-4069

Name of the Vulnerable Software and Affected Versions: SAP NWBC for HTML - versions SAP UI 754 through SAP UI 758 SAP NWBC for HTML - versions SAP BASIS 700 through SAP BASIS 702 SAP NWBC for HTML - version SAP BASIS 731 Description: The issue arises from insufficient encoding of user-controlled...

CVE-2015-7968

nwbcext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbcext2int/ URI...

CVE-2015-7968: Improper Restriction of XML External Entity Reference

nwbcext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbcext2int/ URI...

PT-2020-7900

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server before Security Note 2183189 Description: The issue allows XXE attacks for local file inclusion via the "sap/bc/ui2/nwbc/nwbc ext2int/" URI. This can be exploited to access local files. Recommendations: For SA...

CVE-2014-9569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...

CVE-2014-4160

CVE-2014-4160 concerns multiple cross-site scripting (XSS) flaws in the SAP NetWeaver Business Client (NWBC) testcanvas node. The vulnerabilities enable remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter. The public description confirms XS...

CVE-2014-4160: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the testcanvas node in SAP NetWeaver Business Client NWBC allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 sap-accessibility parameter...

PT-2014-5711

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Client NWBC affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the testcanvas node of SAP NetWeaver Business Client NWBC. These vulnerabilities allow remot...