EUVD-2015-4010

Malware in sbrugna...

EUVD-2016-1203

Malware in sbrugna...

EUVD-2016-7703

Malware in sbrugna...

EUVD-2016-7079

Malware in sbrugna...

EUVD-2016-7080

Malware in sbrugna...

EUVD-2016-6782

Malware in sbrugna...

EUVD-2016-5023

Malware in sbrugna...

EUVD-2017-6749

Malware in sbrugna...

EUVD-2017-6750

Malware in sbrugna...

EUVD-2017-6082

Malware in sbrugna...

EUVD-2017-17794

Malware in sbrugna...

EUVD-2015-7888

Malware in sbrugna...

CVE-2017-15296

The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964...

Cross site request forgery (csrf)

The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964...

CVE-2017-15294

The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964...

Code injection

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

CVE-2017-14511

An issue was discovered in SAP E-Recruiting aka ERECRUIT 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receives a link by email to confirm access to the provided email address. However, this measure can be bypassed and attackers can register and...

CVE-2017-11457

XML external entity XXE vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249...

CVE-2017-11460

Cross-site scripting XSS vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shpresult.jsp, aka SAP Security Note 2308535...

Design/Logic Flaw

SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service process crash via vectors involving disp+work.exe, aka SAP Security Note 2406841...