CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

Design/Logic Flaw

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

CVE-2023-29111

CVE-2023-29111 affects SAP Application Interface Framework (AIF) ODATA service versions 755 and 756. The vulnerability arises from excessive information disclosure in the AIF component, allowing an authorized attacker to leverage disclosed details to potentially exploit the component, with a low ...

CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

SAP Application Interface Framework 信息泄露漏洞

SAP Application Interface Framework SAP AIF is an application interface framework from SAP. An information disclosure vulnerability exists in SAP Application Interface Framework ODATA service versions 755, 756, which originates from a program disclosure of sensitive information and can be exploit...

SAP Application Interface Framework 跨站脚本漏洞

SAP Application Interface Framework SAP AIF is an application interface framework from SAP, Germany. A security vulnerability exists in SAP Application Interface Framework ODATA service versions 600 and 700, which allows an authorized attacker to enter a link or title with custom CSS classes into...

MAL-2022-5019 Malicious code in odata-discriminator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265529bcc74ef5bda572c9fde28874a801e8ce0977e3981dbc87bbc3f2df2500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odata-discriminator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265529bcc74ef5bda572c9fde28874a801e8ce0977e3981dbc87bbc3f2df2500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation

Summary Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation Vulnerability Details CVEID: CVE-2017-0247 DESCRIPTION: Microsoft ASP.NET Core is vulnerable to a denial of service, caused by improper validation of web requests in the TextEncoder.EncodeCore function. ...

Power Apps OData Feeds Detected

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user. The scanner detected the presence of public data ...

Microsoft Spills 38 Million Sensitive Data Records Via Careless Power App Configs

For months, Microsoft’s Power Apps portals exposed personal data tied to 38 million records ranging from COVID-19 vaccination status, Social Security numbers and email addresses. Consumers most affected by what is being called a “platform issue” are those doing business with American Airlines,...

Description of the security update for SharePoint Server 2019: June 8, 2021 (KB5001944)

None None...

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...

Authorization

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...

com.genexus:gxodata (>=2.6.2 <=2.7.30), com.github.axway-api-management-plus.apim-cli:apimcli-apim-adapter (>=1.14.4 <=1.14.13) +44 more potentially affected by CVE-2020-1925 via org.apache.olingo:odata-client-core (>=4.0.0 <=4.7.0)

org.apache.olingo:odata-client-core MAVEN version =4.0.0, =2.6.2, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =0.1.14, =1.0.0-RELEASE, =1.0.0-RELEASE, =4.26.0, =5.2.0 and more Source cves: CVE-2020-1925 Source advisory: OSV:G...

com.genexus:gxodata (>=2.6.2 <=2.7.30), com.github.axway-api-management-plus.apim-cli:apimcli-apim-adapter (>=1.14.4 <=1.14.13) +44 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-client-core (>=4.0.0 <=4.6.0)

org.apache.olingo:odata-client-core MAVEN version =4.0.0, =2.6.2, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =1.14.4, =0.1.14, =1.0.0-RELEASE, =1.0.0-RELEASE, =4.26.0, =5.2.0 and more Source cves: CVE-2019-17554 Source advisory: OSV...

com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (=1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (=1.4.0-0) +32 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0 <=4.6.0)

org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0, =1.0.0-RELEASE, =0.31.0, =0.31.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: OSV:GHSA-MGH8-HCWJ-H57V...