Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32082 State: PUBLISHED Published: 2023-05-11T19:22:56.442Z Last Updated: 2025-01-24T21:29:23.721Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: etcd-io Products: etcd Problem Types: CWE-200 Description: etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no known workarounds. Additional Analyst Notes: - C
les auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/etcd-io/etcd/security/advisories/GHSA-3p4g-rcw5-8298 - https://github.com/etcd-io/etcd/pull/15656 - https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.4.md - https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md
CVE ID: CVE-2023-32083 State: PUBLISHED Published: 2023-07-11T17:03:17.935Z Last Updated: 2025-02-28T20:00:43.906Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-122 Description: Microsoft Failover Cluster Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32083
CVE ID: CVE-2023-32084 State: PUBLISHED Published: 2023-07-11T17:03:18.583Z Last Updated: 2025-01-01T01:52:53.475Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 11 version 22H2 Problem Types: CWE-476 Description: HTTP.sys Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32084
CVE ID: CVE-2023-32085 State: PUBLISHED Published: 2023-07-11T17:03:19.131Z Last Updated: 2025-02-28T20:00:34.870Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core instal
2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-126 Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32085
CVE ID: CVE-2023-32086 State: REJECTED Published: 2023-09-05T14:17:01.524Z Last Updated: 2023-09-05T14:34:12.414Z Description: No description available.
CVE ID: CVE-2023-32087 State: PUBLISHED Published: 2023-10-18T11:39:51.648Z Last Updated: 2024-09-12T18:53:40.145Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Pegasystems Products: Pega Platform Problem Types: CWE-79 Description: Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note
CVE ID: CVE-2023-32088 State: PUBLISHED Published: 2023-10-18T11:42:31.137Z Last Updated: 2024-09-12T18:53:27.322Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Pegasystems Products: Pega Platform Problem Types: CWE-79 Description: Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note
CVE ID: CVE-2023-32089 State: PUBLISHED Published: 2023-10-18T11:45:16.300Z Last Updated: 2024-09-12T18:53:11.397Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Pegasystems Products: Pega Platform Problem Types: CWE-79 Description: Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note
CVE ID: CVE-2023-32090 State: PUBLISHED Published: 2023-08-07T11:53:48.738Z Last Updated: 2024-10-09T18:13:45.110Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pegasystems Products: Pega Platform Problem Types: CWE-1393 Description: Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators
CVE ID: CVE-2023-32091 State: PUBLISHED Published: 2023-10-03T13:04:35.233Z Last Updated: 2024-09-20T13:18:21.113Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: POEditor Products: POEditor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/poeditor/wordpress-poeditor-plugin-0-9-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32092 State: PUBLISHED Published: 2023-11-09T22:36:18.547Z Last Updated: 2024-09-03T18:01:57.114Z Vendors: PeepSo Products: Community by PeepSo – Social Network, Membership, Registration, User Profiles Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin <= 6.0.9.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-social-network-membership-registration-user-profiles-plugin-6-0-9-0-cross-site-request-forgery-csrf-vul
munity-by-peepso-social-network-membership-registration-user-profiles-plugin-6-0-9-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32093 State: PUBLISHED Published: 2023-11-09T22:32:17.294Z Last Updated: 2024-09-04T14:22:12.497Z Vendors: Criss Swaim Products: TPG Redirect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Criss Swaim TPG Redirect plugin <= 1.0.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tpg-redirect/wordpress-tpg-redirect-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32094 State: PUBLISHED Published: 2024-12-09T11:30:58.570Z Last Updated: 2024-12-09T13:49:56.476Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Felix Welberg Products: Extended Post Status Problem Types: CWE-862 Description: Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/extended-post-status/vulnerability/wordpress-extended-post-status-plugin-1-0-19-broken-access-co
tabase/wordpress/plugin/extended-post-status/vulnerability/wordpress-extended-post-status-plugin-1-0-19-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32095 State: PUBLISHED Published: 2023-12-29T08:56:42.516Z Last Updated: 2024-09-09T17:41:23.280Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Milan Dinić Products: Rename Media Files Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rename-media-files/wordpress-rename-media-files-plugin-1-0-1-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2023-32096 State: PUBLISHED Published: 2023-05-18T18:45:08.415Z Last Updated: 2025-01-21T21:35:59.341Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-14 Description: Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
CVE ID: CVE-2023-32097 State: PUBLISHED Published: 2023-05-18T18:45:36.647Z Last Updated: 2025-01-21T21:35:35.812Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-14 Description: Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
CVE ID: CVE-2023-32098 State: PUBLISHED Published: 2023-05-18T18:46:01.441Z Last Updated: 2025-01-21T21:33:52.378Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-14 Description: Compiler removal of buffer clearing in sli_se_sign_message in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
CVE ID: CVE-2023-32099 State: PUBLISHED Published: 2023-05-18T18:46:22.142Z Last Updated: 2025-01-21T21:33:16.666Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-14 Description: Compiler removal of buffer clearing in sli_se_sign_hash in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
CVE ID: CVE-2023-32100 State: PUBLISHED Published: 2023-05-18T18:47:12.452Z Last Updated: 2025-01-21T21:29:05.078Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: silabs.com Products: Gecko Platform Problem Types: CWE-14 Description: Compiler removal of buffer clearing in sli_se_driver_mac_compute in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1
CVE ID: CVE-2023-32101 State: PUBLISHED Published: 2023-12-29T10:01:51.290Z Last Updated: 2024-11-20T19:15:34.388Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Pexle Chris Products: Library Viewer Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pexle Chris Library Viewer.This issue affects Library Viewer: from n/a through 2.0.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/library-viewer/wordpress-library-viewer-plugin-2-0-6-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-32102 State: PUBLISHED Published: 2023-09-04T11:33:45.427Z Last Updated: 2024-09-24T18:50:13.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pexle Chris Products: Library Viewer Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Pexle Chris Library Viewer plugin <= 2.0.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/library-viewer/wordpress-library-viewer-plugin-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32103 State: PUBLISHED Published: 2023-08-18T13:46:35.595Z Last Updated: 2024-09-25T14:39:11.226Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Theme Palace Products: TP Education Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Theme Palace TP Education plugin <= 4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tp-education/wordpress-tp-education-plugin-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32104 State: PUBLISHED Published: 2023-07-11T12:49:45.850Z Last Updated: 2024-10-07T15:10:30.831Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mark Tilly Products: MyCurator Content Curation Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mark Tilly MyCurator Content Curation plugin <= 3.74 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mycurator/wordpress-mycurator-content-curation-plugin-3-74-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32105 State: PUBLISHED Published: 2023-08-18T13:50:42.212Z Last Updated: 2024-09-25T14:39:01.388Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ollybach Products: WPPizza – A Restaurant Plugin Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza – A Restaurant Plugin plugin <= 3.17.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wppizza/wordpress-wppizza-a-restaurant-plugin-plugin-3-17-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32106 State: PUBLISHED Published: 2023-08-18T13:55:22.754Z Last Updated: 2025-02-19T21:26:13.744Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Fahad Mahmood Products: WP Docs Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-docs/wordpress-wp-docs-plugin-1-9-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32107 State: PUBLISHED Published: 2023-08-18T14:00:03.124Z Last Updated: 2024-09-25T14:38:50.271Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Photo Gallery Team Products: Photo Gallery by Ays – Responsive Image Gallery Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-1-3-reflected-c
ase/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32108 State: PUBLISHED Published: 2023-08-18T14:06:42.601Z Last Updated: 2024-09-25T14:38:32.059Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ignazio Scimone Products: Albo Pretorio On line Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32109 State: PUBLISHED Published: 2023-08-18T14:53:06.219Z Last Updated: 2024-09-25T16:42:26.961Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ignazio Scimone Products: Albo Pretorio On line Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-32110 State: PUBLISHED Published: 2024-05-17T06:42:16.548Z Last Updated: 2024-08-02T15:03:28.831Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: artbees Products: JupiterX Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/jupiterx/wordpress-jupiterx-theme-3-0-0-subscriber-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2023-32111 State: PUBLISHED Published: 2023-05-09T01:38:07.696Z Last Updated: 2025-01-28T19:05:38.871Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP PowerDesigner (Proxy) Problem Types: CWE-787 Description: In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy machine and crash the proxy server, due to faulty implementation of memory management causing a memory corruption. This leads to a high impact on availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3300624 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-32112 State: PUBLISHED Published: 2023-05-09T01:42:23.289Z Last Updated: 2025-01-28T19:00:52.594Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: Vendor Master Hierarchy Problem Types: CWE-862 Description: Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system. Additional Analyst Notes: - CVE Program Container: - CISA
to modification of data impacting the integrity of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/2335198 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-32113 State: PUBLISHED Published: 2023-05-09T01:41:52.722Z Last Updated: 2025-01-28T19:03:43.194Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP GUI for Windows Problem Types: CWE-200 Description: SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad
xploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3320467 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-32114 State: PUBLISHED Published: 2023-06-13T02:38:20.376Z Last Updated: 2025-01-03T02:06:36.461Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP_SE Products: SAP NetWeaver (Change and Transport System) Problem Types: CWE-732 Description: SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application. Additional Analyst Notes:
ed impact on Availability with No impact on Confidentiality and Integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3325642 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-32115 State: PUBLISHED Published: 2023-06-13T02:42:28.223Z Last Updated: 2025-01-03T02:05:51.219Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: Master Data Synchronization (MDS COMPARE TOOL) Problem Types: CWE-89 Description: An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/1794761 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e6003
s://launchpad.support.sap.com/#/notes/1794761 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html