CVE-2015-7725

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the 1 remoteSourceName in the dropCredentials function or unspecified vectors in the 2 setTraceLevelsForXsApps...

CVE-2015-7726: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allows remote authenticated users to inject arbitrary web script or HTML via the role name, aka SAP Security Note 2153898...

PT-2015-2428

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.091.00.1418659308 Description The issue exists due to insufficient protection of the web page structure in the Development Workbench component of the SAP HANA database management system. This allows a remote attacker t...

PT-2015-2427

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.091.00.1418659308 Description The issue is related to multiple SQL injection vulnerabilities in the Web-based Development Workbench of SAP HANA DB. These vulnerabilities allow remote authenticated users to execute...

PT-2015-2429

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160 Description The issue concerns multiple SQL injection vulnerabilities in the Web-based Development Workbench of SAP HANA DB. These vulnerabilities allow remote authenticated users to execute arbitrary SQL...

PT-2015-2431

Name of the Vulnerable Software and Affected Versions SAP HANA Developer Edition DB version 1.00.091.00.1418659308 Description The issue is related to eval injection in the Web-based Development Workbench, allowing remote authenticated users to execute arbitrary XSJS code. This is due to incorrec...

CVE-2015-7728: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user creation in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to inject arbitrary web script or HTML via the username, aka SAP Security Note 2153898...

PT-2015-2430

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160 Description The issue is related to a cross-site scripting XSS vulnerability in the user creation functionality of the Web-based Development Workbench in SAP HANA DB. This vulnerability allows remote...

CVE-2015-7727: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the 1 trace configuration page or 2 getSqlTraceConfiguration function, aka SAP...

CVE-2015-7725: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the 1 remoteSourceName in the dropCredentials function or unspecified vectors in the 2 setTraceLevelsForXsApps...

CVE-2015-7230

The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node...

Design/Logic Flaw

The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node...

CVE-2015-7230

The vulnerability CVE-2015-7230 affects the Drupal Contributed module Workbench Email (7.x-3.x) prior to 7.x-3.4. Remote authenticated users with certain permissions can bypass node and field validation when saving a node, enabling possible unintended content handling. Affected product/version: W...

CVE-2015-7230

The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node...

PT-2015-7480

Name of the Vulnerable Software and Affected Versions Workbench Email module versions 7.x-3.x before 7.x-3.4 Description The issue allows remote authenticated users with certain permissions to bypass node and field validation by saving a node. Recommendations For Workbench Email module versions...

CVE-2015-7230: Undefined Security Weakness

The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node...

Drupal Workbench Email Module Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Workbench Email is one of the modules used to define and configure email conversions. A security bypass vulnerability exists in versions 7.x-3.x prior to 7.x-3.4 of the Drupal Workbench...

Workbench Email - Moderately Critical - Access bypass - DRUPAL-SA-CONTRIB-2015-139

Workbench Email module provides a way for administrators to define email transitions and configurable email subject / messages between those transitions. The module causes node and field validations to be skipped when saving nodes. The vulnerability is mitigated by the fact that an attacker must...

IBM Rational Test Workbench and Rational Test Virtualization Server Validation Bypass Vulnerability

IBM Rational Test Workbench and Rational Test Virtualization Server are both IBM software for creating, modifying, and deploying applications and providing testing capabilities functional testing, regression testing, load testing, etc.. The former is used for enterprise applications; the latter i...

Authentication flaw

Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server 8.0.0.x before 8.0.0.5, 8.0.1.x before 8.0.1.6, 8.5.0.x before 8.5.0.4, 8.5.1.x before 8.5.1.5, 8.6.0.x before 8.6.0.4, and 8.7.0.x before 8.7.0.2 uses the MD5 algorithm for password hashing, which...