44 matches found
CVE-2026-44749
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...
CVE-2026-44749
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...
CVE-2026-44749 Information Disclosure vulnerability in SAP Gateway
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...
CVE-2026-44749
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...
CVE-2026-44749
The CVE-2026-44749 issue affects SAP Gateway and enables an attacker to inject content into error messages, potentially exposing request artefacts (for example, regex patterns) and the underlying URI parsing logic. This leads to a low confidentiality impact with no changes to integrity or availab...
PT-2026-43351
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts e.g., regex patterns and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected...
SAP Gateway 安全漏洞
SAP Gateway is a framework based on open standards developed by SAP, a German company. This product allows non-SAP applications to connect to SAP applications, as well as access SAP applications on mobile devices. There is a security vulnerability in SAP Gateway, which allows attackers to inject...
SAPexpGWanon
SAPexpGWanon Adjustme...
EUVD-2018-14288
Malware in sbrugna...
EUVD-2019-1021
Malware in sbrugna...
EUVD-2019-1092
Malware in sbrugna...
EUVD-2019-1111
Malware in sbrugna...
EUVD-2025-14350
Malicious code in bioql PyPI...
SAP Gateway Client Information Disclosure Vulnerability
SAP Gateway Client is an OData service test and debugging tool from SAP Germany, integrated into SAP NetWeaver Gateway. An information disclosure vulnerability exists in SAP Gateway Client that stems from improper privilege management and can be exploited by an attacker to cause information...
CVE-2019-0319
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not...
CVE-2019-0338
During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...
CVE-2025-42997
Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...
CVE-2025-42997
Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...
CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client
Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...
CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client
Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...