The vulnerability of the Transformation and Data Transfer Process (DTP) in the SAP BW/4HANA data management and analytics system allows attackers to enhance their privileges.

The vulnerability of the Transformation and Data Transfer Process DTP in SAP BW/4HANA systems is related to deficiencies in the authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Meta Model Repository component of the SAP NetWeaver AS for Java software used for creating and deploying web applications allows a attacker to cause a service failure.

The vulnerability of the Meta Model Repository component in the SAP NetWeaver AS for Java software for creating and deploying web applications is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE: Security Advisory (SUSE-SU-2024:2308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-10305 · Sap · Sap Netweaver Application Server Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP and ABAP Platform affected versions not specified Description: The issue is related to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform. This failure allow...

PT-2024-9859 · Sap · Sap S/4Hana Finance

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Finance Advanced Payment Management affected versions not specified Description: The issue is related to a lack of necessary authorization checks for authenticated users, resulting in escalation of privileges. This has a low impac...

PT-2024-26110 · Sap · Sap Enable Now

Name of the Vulnerable Software and Affected Versions: SAP Enable Now affected versions not specified Description: The issue allows an authenticated attacker to upload arbitrary files, including executables, due to missing verification of file type or content. These files might be downloaded and...

PT-2024-28548 · Sap · Sap Commerce

Name of the Vulnerable Software and Affected Versions: SAP Commerce affected versions not specified Description: A user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and registration is activated, without requiring the...

PT-2024-28549 · Sap · Sap Crm

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI Framework affected versions not specified Description: The issue allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests, potentially resulting i...

The vulnerability of SAP Document Builder in creating and managing documents allows for unlimited uploading of sensitive files, enabling an attacker to gain access to read, modify, or delete data.

The vulnerability of SAP Document Builder for document creation and management lies in its ability to allow unlimited uploading of sensitive files. Exploiting this vulnerability could enable a malicious actor to gain read, modify, or delete access to data...

SUSE: Security Advisory (SUSE-SU-2024:2298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Guided Procedures component of the SAP NetWeaver AS for Java software used for creating and deploying web applications allows a malicious individual to gain unauthorized access to confidential information.

The vulnerability of the Guided Procedures component in the SAP NetWeaver AS for Java web application creation and deployment software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to...

Node.js Module @sap/xssec < 3.6.0 Privilege Escalation

The nodejs module @sap/xssec detected on the host is prior to version 3.6.0. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain arbitrary permissions within the applicaiton. Note that Nessus has not tested for these...

SUSE: Security Advisory (SUSE-SU-2024:2303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the User Admin Application component of the SAP NetWeaver AS for Java software, which is used for creating and deploying web applications, allows a attacker to perform XSS attacks.

The vulnerability of the User Admin Application component of the SAP NetWeaver AS for Java software used for creating and deploying web applications is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS...

SUSE: Security Advisory (SUSE-SU-2024:2283-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2293-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE Linux Enterprise For SAP SEoL (11.4.x)

According to its version, SUSE Linux Enterprise For SAP is 11.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

SUSE Linux Enterprise For SAP SEoL (12.4.x)

According to its version, SUSE Linux Enterprise For SAP is 12.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

SUSE Linux Enterprise For SAP SEoL (12.3.x)

According to its version, SUSE Linux Enterprise For SAP is 12.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...