Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-89126 | 10.0 | SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionalit | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| CVE-2026-89125 | 6.0 | Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials acros | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| CVE-2026-89119 | 9.6 | SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an u | 2026-11-10 01:17:22 | 2026-11-10 01:17:22 |
| CVE-2026-89115 | 4.4 | SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authenticat | 2026-11-10 01:17:21 | 2026-11-10 01:17:21 |
| CVE-2026-89114 | 7.5 | SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests. An unauthenticated attacker could send a specially crafted request to retrieve sensitive business information. This results in a high imp | 2026-11-10 01:17:21 | 2026-11-10 01:17:21 |
| CVE-2026-89103 | 10.0 | SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this | 2026-11-10 01:17:21 | 2026-11-10 01:17:21 |
| CVE-2026-76973 | 7.5 | Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted network requests to the affected service. By triggering the vulnerability, the attacker c | 2026-11-10 01:17:20 | 2026-11-10 01:17:20 |
| CVE-2026-76970 | 7.5 | Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigg | 2026-11-10 01:17:20 | 2026-11-10 01:17:20 |
| CVE-2026-76966 | 8.9 | Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to | 2026-11-10 01:17:20 | 2026-11-10 01:17:20 |
| CVE-2026-76965 | 9.9 | SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system comm | 2026-11-10 01:17:20 | 2026-11-10 01:17:20 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13148
Zapisa po stranici: