Archive

10 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /10 April 2020 →

All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

Medium 4.7

CVE-2020-6210

SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the at…

SAP SAP Fiori Launchpad

Mar 10, 2020
Medium 4.7

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning m…

SAP SAP Cloud Platform Integration for Data Services

Mar 10, 2020
Medium 6.1

CVE-2020-6205

SAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02, 7.10, 7.11, 7.30, 7.31…

SAP SAP NetWeaver Application Server ABAP (Smart Forms) - SAP_BASIS

Mar 10, 2020
Medium 4.3

CVE-2020-6204

The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 60…

SAP SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV) SAP Treasury and Risk Management (Transaction Management) (S4CORE)

Mar 10, 2020
Medium 5.5

CVE-2020-6202

SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; doe…

SAP SAP NetWeaver Application Server Java (User Management Engine)

Mar 10, 2020
Medium 6.1

CVE-2020-6201

The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlle…

SAP SAP Commerce Cloud (Testweb Extension)

Mar 10, 2020
Medium 5.4

CVE-2020-6200

The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template…

SAP SAP Commerce Cloud (SmartEdit Extension)

Mar 10, 2020
Medium 5.4

CVE-2020-6199

The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and…

SAP SAP ERP (SAP_FIN) SAP S/4HANA (S4CORE) SAP ERP (EAPPGLO)

Mar 10, 2020
Medium 5.4

CVE-2020-6178

SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser hi…

SAP SAP Enable Now

Mar 10, 2020
Medium 6.8

CVE-2019-19296

A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default …

Siemens SiNVR/SiVMS Video Server ICS / OT

Mar 10, 2020
Medium 6.5

CVE-2019-19290

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in th…

Siemens Control Center Server (CCS) ICS / OT

Mar 10, 2020
Medium 6.3

CVE-2019-19294

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Co…

Siemens Control Center Server (CCS) ICS / OT

Mar 10, 2020
Medium 5.3

CVE-2019-19291

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (A…

Siemens Control Center Server (CCS) SiNVR/SiVMS Video Server ICS / OT

Mar 10, 2020
Medium 4.3

CVE-2019-19295

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (…

Siemens Control Center Server (CCS) ICS / OT

Mar 10, 2020
Medium 6.1

CVE-2019-19293

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Co…

Siemens Control Center Server (CCS) ICS / OT

Mar 10, 2020
Medium 4.3

CVE-2019-13457

An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user can use the search re…

otrs2 Ubuntu

Mar 10, 2020
Medium 5.4

CVE-2020-4162

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users …

IBM InfoSphere Information Server

Mar 10, 2020
Medium 5.4

CVE-2019-4608

IBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

IBM Workload Scheduler

Mar 10, 2020