Lucene search
+L

262 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 2:42 p.m.•16 views

CVE-2020-6241

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...

8.8CVSS7.4AI score0.00974EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:40 p.m.•33 views

CVE-2020-6295

Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to...

7.8CVSS6.3AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:38 p.m.•17 views

CVE-2020-6253

Under certain conditions, SAP Adaptive Server Enterprise Web Services, versions 15.7, 16.0, allows an authenticated user to execute crafted database queries to elevate their privileges, modify database objects, or execute commands they are not otherwise authorized to execute, leading to SQL...

7.2CVSS7.6AI score0.01236EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:37 p.m.•21 views

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

9.1CVSS7.8AI score0.01888EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/25 12:00 a.m.•3 views

CVE-2023-28847: Improper Restriction of Excessive Authentication Attempts

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0.0 prior to 25.0.5; as well as Nextcloud Server Enterprise 23.0.0 prior to 23.0.12.6, 24.0.0 prior to 24.0.11, and 25.0.0 prior to 25.0.5; an attack...

7.5CVSS5.7AI score0.00774EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/30 12:00 a.m.•23 views

PT-2023-21735 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Payara Server versions 4.1.2.191 through 5.20.0 and newer Enterprise Payara Server versions 5.2020.1 and newer Community Description: A JNDI rebind operation in the default ORB listener allows remote attackers to load malicious code on the...

9.8CVSS7.6AI score0.00938EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/07/06 12:00 a.m.•17 views

The vulnerability of SAP Adaptive Server Enterprise, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of SAP Adaptive Server Enterprise is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

3.2CVSS6.6AI score0.0023EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•69 views

SAP Adaptive Server Enterprise Elevation of Privilege Vulnerability

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An elevation of privilege vulnerability exists in SAP Adaptive Server Enterprise. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use the vulnerabili...

7.2CVSS6.4AI score0.0023EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/17 1:15 p.m.•9 views

CVE-2021-45026

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting XSS...

6.1CVSS5.8AI score0.01178EPSS
SaveExploits3References3
OSV
OSV
•added 2022/06/17 1:15 p.m.•15 views

CVE-2021-45024

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

9.8CVSS5.8AI score0.0108EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2022/06/17 1:15 p.m.•14 views

CVE-2021-45024

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

9.8CVSS7.3AI score0.0108EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•5 views

CVE-2021-45024: Improper Restriction of XML External Entity Reference

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

9.8CVSS8.2AI score0.0108EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•23 views

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 安全漏洞

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...

7.5CVSS5.6AI score0.00583EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•6 views

CVE-2021-45025: Cleartext Storage of Sensitive Information

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie...

7.5CVSS7.3AI score0.00583EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•22 views

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 代码问题漏洞

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An XML external entity injection vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which...

9.8CVSS5.7AI score0.0108EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•6 views

CVE-2021-45026: Improper Neutralization of Input During Web Page Generation

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting XSS...

6.1CVSS6.4AI score0.01178EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2022/06/17 12:00 a.m.•11 views

PT-2022-12292 · Asg · Asg-Zena Cross Platform Server Enterprise Edition

Name of the Vulnerable Software and Affected Versions: ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

6.1CVSS5.9AI score0.01178EPSS
SaveExploits3References8
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•16 views

SAP Adaptive Server Enterprise 安全漏洞

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An elevation of privilege vulnerability exists in SAP Adaptive Server Enterprise. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use the vulnerabili...

7.2CVSS5.6AI score0.0023EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•2 views

PT-2022-3350

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise affected versions not specified SUID-root program affected versions not specified Description The issue is related to a highly privileged user exploiting a SUID-root program to escalate privileges to root on a...

7.2CVSS0.0023EPSS
SaveExploits0References7
NVD
NVD
•added 2022/02/09 11:15 p.m.•33 views

CVE-2022-22528

SAP Adaptive Server Enterprise ASE - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The...

7.8CVSS0.00316EPSS
SaveExploits0References2
Rows per page
Query Builder