EUVD-2016-7074

Malware in sbrugna...

EUVD-2017-3080

Malware in sbrugna...

SAP Updates Two-Year-Old Patch for TREX Vulnerability

SAP has issued an updated patch for a code-injection vulnerability affecting the TREX search engine integrated into more than a dozen SAP products, including the old NetWeaver application integration platform and the SAP HANA database. The flaw was originally found in 2015 and patched in SAP HANA...

SAP TREX Information Disclosure Vulnerability (CNVD-2016-07355)

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An information disclosure vulnerability exists in SAP TREX version 7.10 Revision 63, which can be exploited by a remote attacker to disclose technical information about the TREX system and perform queries o...

SAP TREX Arbitrary File Read Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An arbitrary file read vulnerability exists in SAP TREX, which can be exploited by a remote attacker to read arbitrary files in an affected application where the user resides...