Archive
9 May 2023
Vulnerabilities first published on this day (UTC), newest first.
252 results · Feed
-
High 7.5
Memory Corruption vulnerability in SAP PowerDesigner (Proxy)
In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy machine and crash the proxy server, due to faulty implementation of memory management causing a memory corruption. This leads to a high impact …
-
Medium 5.4
Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation
SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and …
-
Medium 6.1
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or mo…
-
Medium 5.0
Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420, 430, allows an attacker to access information which would otherwise be restricted. Some users with specific privileges could have access …
-
High 8.2
Improper access control during application start-up in SAP AS NetWeaver JAVA.
In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called w…
-
High 7.1
Improper Neutralization of Input in SAPUI5
Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Fur…
-
Medium 6.1
Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, re…
-
Medium 6.1
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or mo…
-
Medium 6.3
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality, limited impact…
-
Medium 5.5
In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local…
-
Medium 5.5
In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial o…
-
Medium 4.4
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
Medium 4.4
In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local de…
-
Medium 4.4
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
High 7.8
In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with…
-
High 7.8
In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with…
-
Medium 4.4
In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial …
-
Unscored —
In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in bluet…
-
Medium 4.4
the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 4.4
the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service w…
-
Medium 4.4
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
High 7.8
In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no…
-
High 7.8
.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with n…
-
Medium 4.4
In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 4.4
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
Medium 4.4
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
Medium 5.5
In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
-
Medium 5.5
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 5.5
In engineermode service, there is a possible missing permission check. This could lead to local denial of service with …
-
Medium 5.5
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 5.5
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 5.5
In contacts service, there is a possible missing permission check. This could lead to local denial of service with no a…
-
Medium 4.4
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 4.4
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 4.4
In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
Medium 5.5
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with n…
-
Medium 5.5
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with n…
-
High 7.8
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with n…
-
High 7.8
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with n…
-
High 7.8
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with n…