Lucene search
+L

225 matches found

NVD
NVD
added 2023/02/14 4:15 a.m.22 views

CVE-2023-23852

SAP Solution Manager System Monitoring - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/14 4:15 a.m.19 views

CVE-2023-0025

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources...

6.5CVSS6.2AI score0.00345EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/14 4:15 a.m.30 views

CVE-2023-23855

SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validation. A successful attack could lead an attacker to read or modify the information or expose the user to a phishing attack. As a result, it has a low impact to...

6.5CVSS6.2AI score0.00302EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/14 4:15 a.m.8 views

CVE-2023-23852

SAP Solution Manager System Monitoring - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6.4AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/14 4:15 a.m.28 views

CVE-2023-0024

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in...

6.5CVSS6.1AI score0.00385EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/14 4:15 a.m.9 views

CVE-2023-0024

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in...

5.4CVSS6AI score0.00385EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/14 4:15 a.m.23 views

Cross site scripting

SAP Solution Manager System Monitoring - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.8CVSS6AI score0.00418EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/14 4:15 a.m.21 views

Cross site scripting

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in...

4.9CVSS5.1AI score0.00385EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/14 3:14 a.m.10 views

CVE-2023-23855

SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validation. A successful attack could lead an attacker to read or modify the information or expose the user to a phishing attack. As a result, it has a low impact to...

6.5CVSS6.2AI score0.00302EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/14 3:12 a.m.26 views

CVE-2023-23852

SAP Solution Manager System Monitoring - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6.2AI score0.00418EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/02/14 3:12 a.m.12 views

CVE-2023-23852

SAP Solution Manager System Monitoring - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.00418EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/14 3:10 a.m.30 views

CVE-2023-0025

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources...

6.5CVSS6.4AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/02/14 3:10 a.m.6 views

CVE-2023-0025

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources...

6.5CVSS6.2AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/14 3:10 a.m.40 views

CVE-2023-0024

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in...

6.5CVSS6.2AI score0.00385EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/02/14 3:10 a.m.7 views

CVE-2023-0024

SAP Solution Manager BSP Application - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in...

6.5CVSS6.1AI score0.00385EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/02/14 12:00 a.m.14 views

PT-2023-15955 · Sap · Sap Solution Manager

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager BSP Application version 720 Description: The issue allows an authenticated attacker to craft a malicious link. When clicked by an unsuspecting user, this link can be used to read or modify some sensitive information or...

6.5CVSS5.4AI score0.00385EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.14 views

SAP Solution Manager 跨站脚本漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

6.5CVSS5.9AI score0.00385EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:00 a.m.13 views

The vulnerability of the Diagnostics Agent tool of the SAP Solution Manager software platform for operating systems Windows allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostics Agent tool of the SAP Solution Manager software platform for operating systems with Windows is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6CVSS6AI score0.00167EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/12/13 4:15 a.m.6 views

CVE-2022-41275

In SAP Solution Manager Enterprise Search - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impa...

6.1CVSS5.8AI score0.00457EPSS
SaveExploits0References2
Prion
Prion
added 2022/12/13 4:15 a.m.30 views

Design/Logic Flaw

In SAP Solution Manager Enterprise Search - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impa...

5.8CVSS6.2AI score0.00457EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder