The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-landing' shortcode in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-search' shortcode in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2019-0344 is a high-severity vulnerability in SAP Commerce Cloud (formerly Hybris) involving deserialization of untrusted data in the mediaconversion and virtualjdbc extensions. This flaw allows attackers to perform code injection. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.
An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system.
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application
SAP NWBC for HTML - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious javascript to cause limited impact to confidentiality and integrity of the application data after successful exploitation.
SAP NetWeaver ABAP Application Server and ABAP Platform do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An attacker with low privileges can cause limited impact to confidentiality of the application data after successful exploitation.
In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.
Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.
An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.
CVE-2022-22536 is a high-severity HTTP request smuggling vulnerability affecting multiple SAP products including SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server, and SAP Web Dispatcher. This vulnerability allows an unauthenticated attacker to prepend arbitrary data to a victim's HTTP request, potentially enabling function execution impersonating the victim or poisoning intermediary web caches. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-38163 is a high-severity vulnerability in SAP NetWeaver that allows unrestricted file upload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-2386 is a high-severity SQL injection vulnerability in the UDDI server component of SAP NetWeaver J2EE Engine 7.40. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-2388 is a high-severity information disclosure vulnerability in SAP NetWeaver AS JAVA 7.4. It allows remote attackers to obtain sensitive user information by sending a crafted HTTP request to the Universal Worklist Configuration component. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
SAP Customer Relationship Management (CRM) is affected by a path traversal vulnerability (CVE-2018-2380) that arises from insufficient validation of user-supplied path information. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2010-5326 is a high severity vulnerability in SAP NetWeaver Application Server Java Platforms where the Invoker Servlet does not require authentication. This flaw allows remote attackers to execute arbitrary code by sending crafted HTTP or HTTPS requests. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2016-9563 is an XML External Entity (XXE) vulnerability in SAP NetWeaver Application Server Java Platforms, specifically in the BC-BMT-BPM-DSK component. It allows remote, authenticated users to perform XXE attacks. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2020-6287 is a vulnerability in SAP NetWeaver Application Server Java Platforms where missing authentication for a critical function allows unauthenticated attackers to execute configuration tasks and create administrative users. This flaw enables unauthorized access to sensitive administrative capabilities without requiring valid credentials.
CVE-2016-3976 is a directory traversal vulnerability in SAP NetWeaver Application Server Java Platforms. It occurs via the fileName parameter to the CrashFileDownloadServlet, allowing remote attackers to read arbitrary files on the server. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
