Directory traversal

Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files via unspecified vectors...

Sql injection

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8659

Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files via unspecified vectors...

PT-2014-8665

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety affected versions not specified Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. The exact vectors used for exploitation are not specified. Recommendations A...

CVE-2014-8659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-8664: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8670

Name of the Vulnerable Software and Affected Versions SAP Environment, Health, and Safety Management affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations At...

SAP Management Console getEnvironment

This module simply attempts to identify SAP Environment settings through the SAP Management Console SOAP Interface. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Management Console...