Lucene search
K

44 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:25 p.m.7 views

CVE-2026-44749

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...

4.3CVSS5.5AI score0.00258EPSS
Exploits0References1
NVD
NVD
added 2026/05/26 6:16 p.m.13 views

CVE-2026-44749

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...

4.3CVSS0.00258EPSS
Exploits0References2
CVE
CVE
added 2026/05/26 5:24 p.m.15 views

CVE-2026-44749

The CVE-2026-44749 issue affects SAP Gateway and enables an attacker to inject content into error messages, potentially exposing request artefacts (for example, regex patterns) and the underlying URI parsing logic. This leads to a low confidentiality impact with no changes to integrity or availab...

4.3CVSS5.8AI score0.00258EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/26 5:24 p.m.6 views

CVE-2026-44749

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...

4.3CVSS5.8AI score0.00258EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/26 5:24 p.m.33 views

CVE-2026-44749 Information Disclosure vulnerability in SAP Gateway

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...

4.3CVSS0.00258EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.7 views

PT-2026-43351

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...

4.3CVSS5.8AI score0.00258EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.7 views

SAP Gateway 安全漏洞

SAP Gateway is a framework based on open standards developed by SAP, a German company. This product allows non-SAP applications to connect to SAP applications, as well as access SAP applications on mobile devices. There is a security vulnerability in SAP Gateway, which allows attackers to inject...

4.3CVSS5.8AI score0.00258EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/11/28 3:59 p.m.131 views

SAPexpGWanon

SAPexpGWanon Adjustme...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-14288

Malware in sbrugna...

7.5CVSS7.6AI score0.01085EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-1021

Malware in sbrugna...

5.9CVSS6AI score0.01564EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-1092

Malware in sbrugna...

7.5CVSS7.6AI score0.02511EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-1111

Malware in sbrugna...

5.3CVSS5.5AI score0.01111EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-14350

Malicious code in bioql PyPI...

6.6CVSS6.4AI score0.00225EPSS
Exploits0References2
CNVD
CNVD
added 2025/05/28 12:0 a.m.0 views

SAP Gateway Client Information Disclosure Vulnerability

SAP Gateway Client is an OData service test and debugging tool from SAP Germany, integrated into SAP NetWeaver Gateway. An information disclosure vulnerability exists in SAP Gateway Client that stems from improper privilege management and can be exploited by an attacker to cause information...

6.6CVSS6.6AI score0.00225EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:4 a.m.8 views

CVE-2019-0319

The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not...

7.5CVSS6.5AI score0.02511EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:10 a.m.9 views

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

5.3CVSS6.9AI score0.01111EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 1:10 a.m.13 views

CVE-2025-42997

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

6.6CVSS6.7AI score0.00225EPSS
Exploits0References1
NVD
NVD
added 2025/05/13 1:15 a.m.27 views

CVE-2025-42997

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

6.6CVSS0.00225EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/13 12:17 a.m.14 views

CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

6.6CVSS0.00225EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/13 12:17 a.m.6 views

CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

6.6CVSS6.5AI score0.00225EPSS
Exploits0References2
Rows per page
Query Builder