SAP SAPControl Web Service Interface Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local privilege escalation product: SAP® SAPControl Web Service Interface sapuxuserchk vulnerable version: see section "Vulnerable / tested versions" fixed version: see S...

SAP NetWeaver AS ABAP SSRF (3194674)

A server side request forgery vulnerability exists in SAP NetWeaver Application Server ABAP. This allows an authenticated user to misuse a function of sapcontrol webfunctionalitystartservice in Kernel which enables malicious users to retrieve information. On successful exploitation, an attacker c...

CVE-2022-29612

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol...

CVE-2022-29612

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol...

CVE-2022-29612

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol...

PT-2022-19725 · Sap · Sap Netweaver +2

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04 SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KRNL64NUC 7.22, 7.22EXT, 7.49 SAP NetWeaver, ABAP Platform...

CVE-2022-29612: Server-Side Request Forgery (SSRF)

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol...

Authentication flaw

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993...

CVE-2017-15297

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993...

PT-2017-13975

Name of the Vulnerable Software and Affected Versions SAP Hostcontrol affected versions not specified Description The issue concerns the lack of authentication requirement for the SOAP SAPControl endpoint in SAP Hostcontrol. Recommendations At the moment, there is no information about a newer...

CVE-2017-15297: Improper Authentication

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993...

PT-2015-7952

Уязвимость программной интеграционной платформы SAP NetWeaver существует из-за недостаточного ограничения доступа к методу GetSecNetworkId SAPControl. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить сведения о доступности внутренних сетевых служб при помощи...