SAP NetWeaver suffers from an authentication bypass vulnerability in the CTC service.
acd1799151dd58a8e541f3f7f81d871ec30f13688f6df45a6dc99cabf056f139The SAP NetWeaver SPML service suffers from a cross site request forgery vulnerability.
322ab3a2b0d5f55c5b57691f980918122aa961043519cd3ac848bdaa88e9ca1bSAP NetWeaver BW DOC metadata suffers from a cross site scripting vulnerability.
68d97d678e3c0fdb4545781101c9713cebe198b3b21c2030417b80a51a588341SAP NetWeaver Mobile Engine suffers from an information disclosure vulnerability that discloses version and username information.
f887bedbaf6328e9e0090370a2ef1d312367550062ad97dcd452fb137b15cb06SAP NetWeaver suffers from a version information disclosure vulnerability.
b22b17c91f8bbca4c55e92c62cfe94d4fcb66501a137984af9813c6c9627064dSAP Front End applications (SAPGui.exe) are vulnerable to DLL hijacking attacks allowing for remote code execution.
28ae63b22ea645e5c51c549e98085f2be91b625a787181783ae2e6a8a3c0929eSAP NetWeaver Runtime suffers from a cross site scripting vulnerability.
9181483e340b92a0eba8cbdc85b2d7b41fe702b11953196d7adeec92089118b9Multiple cross site scripting vulnerabilities have been discovered in the SAP NetWeaver Integration Directory.
6c1f10b4919499bf8e2eb3a38ba5b4c505670c59ce701c4a2769af93a5d72d82Multiple cross site scripting vulnerabilities have been discovered in the PerformanceManagement application module in SAP Crystal Reports Server 2008.
51f030365393b65a3456ecb53c5f5e39b1847584605dc54abbe2141bcba154a8Whitepaper called Forgotten World - Corporate Business Application Systems. This paper will describe some basic and advanced threats and attacks on Enterprise Business Applications – the core of many companies. Both the paper and Blackhat DC presentation are included in this archive.
2e70cc9c883bdf948194b3801a4b9fe5f07f8e73912c291bd5c5b643e993e4a6Oracle Document Capture version 10.1.3.5 suffers from buffer overflow and insecure method vulnerabilities.
d8de28a03cf63e8eb852fd978524155069a598269f9adfa1fc15fb5c2f8912faOracle Document Capture suffers from an insecure method vulnerability in Actbar2.ocx.
03b34491ba00cddad42d1df6075c24902828638e56eeebc8ded920c1e03e8609Insecure practices where found in the library scriptinghelpers.dll from SAP Crystal Report Server 2008. An attacker could construct a html-page containing a call insecure functions.
29926d9586641116eb339bef4f9eb33eae55dfcd24cd7eb87a02a1fbbd8d02b7SAP Crystal Report Server 2008 suffers from a directory traversal vulnerability.
5bebb637d7e51e2a0d9d84df5f7b28a6a33af536f8f0ea29e3bf80b431a7af0aSAP Crystal Report Server 2008 suffers from a cross site scripting vulnerability.
5bb33dcb865e51328736f78871bcaf01a2e663aac535fd2aa2d1af81cdfe13cdProgress OpenEdge Enterprise RDBMS version 10.2A has some vulnerabilities that make it possible to enumerate UserID and bypass authentication.
94f3ea7ac21edb9e58b5237ff7c2a7826e37b408dbacdbff22fb5468c6bdec38Oracle Document Capture contains ActiveX components that contains insecure methods in empop3.dll.
d17d07c5e57b563c011ed3d0796b9e0b84d6136526dcd7ca890a49dc34f3c55bEasyMail ActiveX Control (emsmtp.dll) that included into Oracle Document Capture distrib can be used to read any file in target system. The vulnerable method is "ImportBodyText()".
e0290533ffa0e0be9cb707947d2fe37461961f3b2e54f7eb0baa68b865261ae8SAP NetWeaver version 7.0 suffers from a denial of service vulnerability in the Metamodel Repository.
5e2e562201a583c2c83faeee154e85b823b0642aff4fe38ac6116e1056d89383The SAP NetWeaver administrator panel from ECC version 6.0 suffers from cross site scripting vulnerabilities.
3d805721f30788cc734b4cca6025ed61f899f4240facd6d677bd99feb4a472b9Oracle BPEL Console version 10.1.3.3.0 suffers from a cross site scripting vulnerability.
8b80837fd9c12c060f51e80f3ef5cf3cb1543ef6936db9fd039e3765f60d152dOracle BI Publisher suffers from a HTTP response splitting vulnerability.
a16b4a5d2e42764c015a89ca8d14b3e7d1594fc9ccef544177abbde6f3759df3SAP NetWeaver SLD versions 6.4 through 7.02 suffer from multiple cross site scripting vulnerabilities.
8b641e06e58f7c35d9140a710b83cde908ed39795c6e2eedaaa58b596a3b8385SAP Netweaver versions 6.4 through 7.0 suffer from a cross site scripting vulnerability.
3a33cbd84a9db933f995cbae70e001e3a89be10e4fa30b160c720ca941a9066eAn Active-X component in CLIproxy.dll from Symantec Antivirus Client Proxy suffers from a buffer overflow vulnerability.
01e4fed6a5192be5896fea6d73e2571c3e0946b13d52fefe04ff31a16cedd628
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed