Malicious code in @f5rest/odata-v4-service-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3183cb83976cbb4d5011bae853bc65c285e5204ca17b1435d5ce6801dcfd9e2a The package @f5rest/odata-v4-service-metadata was found to contain malicious code...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...

EUVD-2021-14356

Malware in sbrugna...

EUVD-2025-7700

Malicious code in bioql PyPI...

EUVD-2023-32714

Malicious code in bioql PyPI...

EUVD-2023-45871

Malicious code in bioql PyPI...

CVE-2023-41368

The OData service of the S4 HANA Manage checkbook apps - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call...

SAP Just In Time Elevation of Privilege Vulnerability

SAP Just In Time is an application from SAP Germany designed to enable efficient demand-driven production and logistics throughout the supply chain. An elevation of privilege vulnerability exists in SAP Just In Time, which stems from the OData service not performing the necessary privilege checks...

CVE-2025-26656

OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...

CVE-2025-26656

OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...

CVE-2025-26656 Missing Authorization check in S/4HANA (Manage Purchasing Info Records)

OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...

CVE-2025-26656 Missing Authorization check in S/4HANA (Manage Purchasing Info Records)

OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application...

CVE-2025-26656

CVE-2025-26656 affects SAP S/4HANA via the OData service in Manage Purchasing Info Records. The root cause is missing authorization checks for an authenticated user, enabling privilege escalation with a low integrity impact. CVSS 3.1 vector shows low privileges required and low impact. No exploit...

Design/Logic Flaw

The OData service of the S4 HANA Manage checkbook apps - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call...

CVE-2023-41368

CVE-2023-41368 affects SAP S/4HANA’s Manage checkbook apps OData service (S/4HANA) versions 102–107. The vulnerability allows an attacker to change the checkbook name by simulating an update OData call. The CVE note indicates the issue is an Insecure Direct Object Reference style exposure, with n...

CVE-2023-41368 Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)

The OData service of the S4 HANA Manage checkbook apps - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call...

PT-2023-27931 · Sap · S/4Hana

Name of the Vulnerable Software and Affected Versions: S4 HANA versions 102 through 107 Description: The OData service of the S4 HANA, specifically in the Manage checkbook apps, allows an attacker to change the checkbook name by simulating an update OData call. Recommendations: For versions 102...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...