CVE-2019-0307: Missing Encryption of Sensitive Data

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...

CVE-2019-3477

Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect...

CVE-2019-3477

Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect...

Open redirect

Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect...

CVE-2019-3477

Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect...

CVE-2019-3477

CVE-2019-3477 affects Micro Focus Solution/ SBM (Serena Solutions Business Manager) versions prior to 11.4.2, with an open redirect vulnerability. The issue is attributed to improper input handling (input validation error) in SBM prior to 11.4.2, enabling redirection to attacker-controlled sites....

PT-2019-16587

Name of the Vulnerable Software and Affected Versions Micro Focus Solution Business Manager versions prior to 11.4.2 Description The issue is related to an open redirect. Recommendations For versions prior to 11.4.2, update to version 11.4.2 or later to resolve the issue...

CVE-2019-3477: URL Redirection to Untrusted Site

Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect...

EulerOS 2.0 SP3 : cups (EulerOS-SA-2019-1567)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote a standard...

Fedora 28 : libmediainfo / mediaconch / mediainfo (2019-7155125125)

Update to 19.04. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora Update for singularity FEDORA-2019-da2ed3b0b5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mozilla Firefox Security Advisories (MFSA2019-12, MFSA2019-13) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

WordPress Newsletter Manager plugin <= 1.4 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability found by posix in WordPress Newsletter Manager plugin versions = 1.4. Solution 21 May 2019 - This plugin was closed on May 20, 2019 and is no longer available for download...

Fedora Update for libvirt FEDORA-2019-6e146a714c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Darktrace Enterpise Immune System 3.0.9 / 3.0.10 Cross Site Request Forgery

1 - Vulnerability Darktrace Enterpise Immune System 3.0.9 and 3.0.10 contains multiple cross site request forgery vulnerabilities. It is highly likely that older versions are affected as well, but this has not been confirmed. An attacker can whitelist domains and/or change core Darktrace...

Acunetix Vulnerability Scanner Now With Network Security Scans

User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...

Fedora Update for python3 FEDORA-2019-1ffd6b6064

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Slow performance for a single tenant database backup of the SAP HANA system

Challenge When backing up a small 128 GB tenant/system DB of SAP HANA, the backup performance might be comparatively slower than a file based backup or using a different backup solution. Cause After several customers pointed out the performance degradation - compared to file based backups - the...

CVE-2019-0291

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0293

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...