46 matches found
EUVD-2016-7080
Malware in sbrugna...
EUVD-2017-16667
Malware in sbrugna...
EUVD-2017-3080
Malware in sbrugna...
EUVD-2016-7074
Malware in sbrugna...
CVE-2017-11459
SAP TREX 7.10 allows remote attackers to 1 read arbitrary files via an fget command or 2 write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592...
Command injection
SAP TREX 7.10 allows remote attackers to 1 read arbitrary files via an fget command or 2 write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592...
CVE-2017-11459
SAP TREX 7.10 allows remote attackers to 1 read arbitrary files via an fget command or 2 write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592...
PT-2017-12027
Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Description The issue allows remote attackers to read arbitrary files via an fget command or write to arbitrary files and consequently execute arbitrary code via an fdir command. Recommendations For SAP TREX version 7.10,...
CVE-2017-11459: Improper Control of Generation of Code
SAP TREX 7.10 allows remote attackers to 1 read arbitrary files via an fget command or 2 write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592...
Insecure log configuration in TREX
Application: SAP TREX Versions Affected: SAP TREX 7.1-7.25 Vendor URL: SAP Bug: Information disclosure Reported: 16.05.2017 Vendor response: 17.05.2017 Date of Public Advisory: 12.09.2017 Reference: SAP Security Note 2489196 Author: Nursultan Abubakirov ERPScan VULNERABILITY INFORMATION Class:...
Code injection
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator BWA. The vendor response is SAP Security Note 2419592...
CVE-2017-7691
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator BWA. The vendor response is SAP Security Note 2419592...
PT-2017-17889
Name of the Vulnerable Software and Affected Versions SAP TREX / Business Warehouse Accelerator BWA affected versions not specified Description A code injection issue exists. The vendor has released a response in SAP Security Note 2419592. Recommendations At the moment, there is no information...
CVE-2017-7691: Improper Control of Generation of Code
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator BWA. The vendor response is SAP Security Note 2419592...
CVE-2016-6146
The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226...
CVE-2016-6137
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591...
CVE-2016-6137
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591...
Design/Logic Flaw
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591...
CVE-2016-6137
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591...
PT-2016-6770
Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Revision 63 Description The issue allows remote attackers to obtain sensitive TNS information via an unspecified query. Recommendations For SAP TREX version 7.10 Revision 63, apply the fix provided in SAP Security Note...