VulnCheck KEV: CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

SAP xMII 15 Cross Site Scripting

Application: SAP xMII Versions Affected: SAP xMII 15 Vendor URL: http://SAP.com Bugs: XSS Sent: 04.12.2015 Reported: 05.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 12.04.2016 Reference: SAP Security Note 2201295 Author: Nursultan Abubakirov ERPScan , Vahagn Vardanyan ERPScan...

SAP xMII 15.0 - Directory Traversal

Exploit for php platform in category web applications Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 29.07.2015 Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 22309...

SAP xMII 15.0 - Directory Traversal

SAP xMII 15.0 - Directory Traversal Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 29.07.2015 Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2230978 Author: Dmitry...

SAP xMII 15.0 - Directory Traversal

Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 29.07.2015 Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2230978 Author: Dmitry Chastuhin ERPScan Description 1...

CVE-2016-4016

CVE-2016-4016: SAP Manufacturing Integration Intelligence (MII / xMII) 15 is affected by a reflected cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script via the title parameter of the NavigationApplication URL (webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigati...

CVE-2016-4016: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP Manufacturing Integration and Intelligence aka MII, formerly xMII 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xappsxmiiuiadminnavigation/NavigationApplication, aka SAP Securi...

CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

Directory traversal

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

CVE-2016-2389

The SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 is susceptible to a directory traversal vulnerability (CWE-36) in the GetFileList function. A remote attacker can exploit this by using a .. (dot dot) sequence in the Path parameter to the /Catalog endp...

CVE-2016-2389

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

PT-2016-1283

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.4 SAP Manufacturing Integration and Intelligence xMII component version 15.0 Description The issue is related to a directory traversal vulnerability in the SAP Manufacturing Integration and Intelligence xMII component...

CVE-2016-2389: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence xMII component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. dot dot in the Path parameter to /Catalog, aka SAP Security Note 2230978...

CVE-2015-8330

The PCo agent in SAP Plant Connectivity PCo allows remote attackers to cause a denial of service memory corruption and agent crash via crafted xMII requests, aka SAP Security Note 2238619...

Memory corruption

The PCo agent in SAP Plant Connectivity PCo allows remote attackers to cause a denial of service memory corruption and agent crash via crafted xMII requests, aka SAP Security Note 2238619...

CVE-2015-8330

CVE-2015-8330 affects SAP Plant Connectivity (PCo) agent versions 2.2, 2.3, 15.0 and 15.1. A remote attacker can trigger memory corruption and crash the PCo agent by sending crafted xMII requests, causing denial of service. This is documented by NVD (base score 7.8) and referenced advisories, inc...

PT-2015-7765

Name of the Vulnerable Software and Affected Versions SAP Plant Connectivity PCo affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and agent crash, via crafted xMII requests. Recommendations At the moment,...

CVE-2015-8330: Improper Restriction of Operations within the Bounds of a Memory Buffer

The PCo agent in SAP Plant Connectivity PCo allows remote attackers to cause a denial of service memory corruption and agent crash via crafted xMII requests, aka SAP Security Note 2238619...

SAP xMII - directory traversal vulnerability

Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: SAP Bugs: Directory traversal Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2230978 Author: Dmitry Chastuhin ERPScan VULNERABILITY INFORMATION Class: CWE-36 Impact...