Sap

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-2391 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS portwatcher service.
CVE-2018-2390 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service.
CVE-2018-2389 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 5.7 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.
CVE-2018-2388 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVE-2018-2387 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on ports, which is not available to the user otherwise.
CVE-2018-2386 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVE-2018-2385 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
CVE-2018-2384 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
CVE-2018-2383 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVE-2018-2382 1Sap 1Internet Graphics Server Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not availa...Show more A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not available to the user otherwise.Show less
CVE-2018-2381 1Sap 1Erp Financials Information System Nov 21, 2024 Feb 14, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated...Show more SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.Show less
CVE-2018-2379 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.
CVE-2018-2378 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption.
CVE-2018-2377 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
CVE-2018-2376 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
CVE-2018-2375 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
CVE-2018-2374 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.
CVE-2018-2373 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Applic...Show more Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0.Show less
CVE-2018-2372 1Sap 1Hana Extended Application Services Nov 21, 2024 Feb 14, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.
CVE-2018-2371 1Sap 1Netweaver Java Web Application Nov 21, 2024 Feb 14, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.

Previous 1...596061...80 Next