17830 matches found
MAL-2024-7785 Malicious code in sap-abort (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e2bde6bdff35f1e9b3c13cc8e0202b7b2b76d1390e81fc3ea3d484340f5f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sap-abstract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d699148992a2b2d20128893c0ba7a5d5022338a889ed430995f8dedc448f8a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7788 Malicious code in sap-ac (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 870a5115e5b80eb328e2100fc8e18af8a1dfea9e5dde756b2c4fad13bda5b53d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7786 Malicious code in sap-about (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850696bbc92b40c1859364ea39701d4fc1e460527c5e8c0aa5ef6422b36fee99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7789 Malicious code in sap-accept (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fce9c57c312e62687f13f2fc582feb687da57944fca0f47efdadb6f55f8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sap-accept (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fce9c57c312e62687f13f2fc582feb687da57944fca0f47efdadb6f55f8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the platform for ensuring the functionality of SAP ABA applications, related to improper code generation management, allows an attacker to gain read and modify access to data or cause service failures.
The vulnerability of the platform for ensuring the functioning of SAP ABA applications is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to gain read-only access to data or cause service failures...
SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2024-35654)
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A cross-site scripting vulnerability exists in SAP NetWeaver Knowledge Management XMLEditor, which stems...
SAP Enable Now Authorization Issues Vulnerability
SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from an authorization issue vulnerability that stems from a lack of authorization checking,...
SAP Business Workflow Information Disclosure Vulnerability
SAP Business Workflow is a key component for executing business processes from SAP Germany that allows users to design, implement and manage business processes, ensure process compliance and reduce the need for manual operations through automation. An information disclosure vulnerability exists i...
SAP Commerce Authorization Issues Vulnerability (CNVD-2024-36346)
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. SAP Commerce suffers from an authorization issue vulnerability that originates from a user being able to abuse the...
SAP CRM Information Disclosure Vulnerability
SAP CRM is a customer relationship management system from SAP in Germany. SAP CRM suffers from an information disclosure vulnerability that stems from the application's inadequate protection of sensitive information, which can be exploited by an authenticated attacker to enumerate accessible HTTP...
SAP CRM Authorization Issues Vulnerability
SAP CRM is a customer relationship management system from SAP in Germany. SAP CRM suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users, which could be exploited by an attacker to cause privilege escalation and...
SUSE: Security Advisory (SUSE-SU-2024:2548-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SAP PDCE Authorization Issues Vulnerability
SAP PDCE is a solution from SAP Germany. It is designed to help companies manage and optimize the process of integrating and enriching personal data. SAP PDCE suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users...
SAP CRM Cross-Site Scripting Vulnerability (CNVD-2024-36347)
SAP CRM is a customer relationship management system from SAP, Germany. SAP CRM suffers from a cross-site scripting vulnerability that stems from custom CSS support options that do not adequately encode user-controlled input, which can be exploited by an attacker to execute arbitrary web script o...
SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks
Cybersecurity researchers have uncovered security shortcomings in SAP AI Core cloud-based platform for creating and deploying predictive artificial intelligence AI workflows that could be exploited to get hold of access tokens and customer data. The five vulnerabilities have been collectively...
SUSE: Security Advisory (SUSE-SU-2024:2539-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
