Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:29 a.m.2 views

CVE-2023-29187

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

6.7CVSS7.4AI score0.00135EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:53 a.m.4 views

CVE-2021-27608

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability...

7.5CVSS7.2AI score0.00122EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-14355

Malware in sbrugna...

7.5CVSS7.8AI score0.00122EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-1498

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00047EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-32788

Malicious code in bioql PyPI...

6.7CVSS6AI score0.00135EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 2:13 a.m.2 views

CVE-2025-0069

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS7.1AI score0.00047EPSS
Exploits0References1
NVD
NVD
added 2025/01/14 1:15 a.m.7 views

CVE-2025-0069

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS0.00047EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/14 12:9 a.m.13 views

CVE-2025-0069 DLL Hijacking vulnerability in SAPSetup

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS0.00047EPSS
Exploits0References2
CVE
CVE
added 2025/01/14 12:9 a.m.59 views

CVE-2025-0069

CVE-2025-0069 describes a DLL-injection vulnerability in SAPSetup. The affected component is SAPSetup, where an attacker with local user privileges or access to a compromised Windows account can gain higher privileges, enabling lateral movement and further compromise of the Active Directory, with...

7.8CVSS7.6AI score0.00047EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/14 12:9 a.m.13 views

CVE-2025-0069 DLL Hijacking vulnerability in SAPSetup

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...

7.8CVSS7.6AI score0.00047EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.1 views

SAP SapSetup 代码问题漏洞

SAP SapSetup is an application from SAP, Germany. A suite of tools for installing, updating, maintaining, and distributing software on Windows. A code issue vulnerability exists in SAP SapSetup that stems from the presence of a DLL injection vulnerability, where an attacker with local user rights...

7.8CVSS6.9AI score0.00047EPSS
Exploits0References3
NVD
NVD
added 2023/04/11 4:16 a.m.7 views

CVE-2023-29187

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

6.7CVSS6.8AI score0.00135EPSS
Exploits0References2
Prion
Prion
added 2023/04/11 4:16 a.m.10 views

Privilege escalation

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

3.5CVSS6.8AI score0.00135EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/11 3:9 a.m.7 views

CVE-2023-29187 DLL Hijacking vulnerability in SapSetup (Software Installation Program)

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

6.7CVSS6.8AI score0.00135EPSS
Exploits0References2
CVE
CVE
added 2023/04/11 3:9 a.m.46 views

CVE-2023-29187

Summary: CVE-2023-29187 is a DLL hijacking vulnerability in SAP SapSetup (Software Installation Program) 9.0 on Windows. The issue allows a user with basic privileges to escalate to administrator by exploiting a DLL load order/targeted DLL hijack, with the attacker needing local access and precon...

6.7CVSS6.8AI score0.00135EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/11 3:9 a.m.14 views

CVE-2023-29187 DLL Hijacking vulnerability in SapSetup (Software Installation Program)

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

6.7CVSS7AI score0.00135EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.2 views

PT-2023-22190 · Sap · Sapsetup

Name of the Vulnerable Software and Affected Versions: SapSetup version 9.0 Description: A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup, resulting in a privilege escalation running code as administrator of the same Windows PC. A successful attack depen...

6.7CVSS6.7AI score0.00135EPSS
Exploits0References4
OSV
OSV
added 2021/04/14 3:15 p.m.1 views

CVE-2021-27608

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability...

7.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2021/04/14 3:15 p.m.6 views

CVE-2021-27608

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability...

7.5CVSS0.00122EPSS
Exploits0References2
Prion
Prion
added 2021/04/14 3:15 p.m.314 views

Privilege escalation

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability...

4.4CVSS7.8AI score0.00122EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder