CVE-2019-0311

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0311

Summary: CVE-2019-0311 affects SAP R/3 Enterprise Application’s Automotive Dealer Portal (versions 600–617). It arises from insufficient encoding of user-controlled inputs, enabling Cross-Site Scripting (XSS) where an attacker’s input can execute scripts in a victim’s browser. Affected component:...

CVE-2019-0311

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0311: Improper Neutralization of Input During Web Page Generation

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

PT-2019-11227

Name of the Vulnerable Software and Affected Versions: SAP R/3 Enterprise Application Automotive Dealer Portal versions 600 through 617 Description: The issue arises from insufficient encoding of user-controlled inputs, allowing an attacker to send unwanted scripts to the victim's browser and...

CVE-2018-2436

CVE-2018-2436 affects SAP R/3 Enterprise Retail (EHP6): an authenticated user can escalate privileges due to missing authorization checks on transaction WRCK. Impact described as privilege escalation with high CVSS3 score (8.8) and notable network exposure. Documented references point to SAP Note...

CVE-2018-2436: Missing Authorization

Executing transaction WRCK in SAP R/3 Enterprise Retail EHP6 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

PT-2018-15560

Name of the Vulnerable Software and Affected Versions SAP R/3 Enterprise Retail EHP6 version not specified Description The issue arises from the execution of transaction WRCK in SAP R/3 Enterprise Retail EHP6, where necessary authorization checks for an authenticated user are not performed, leadi...