Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e no mechanisms to force-logout the user (and all other users with that). With this fix implemented, when using the database session backend, the existing sessions of the user are invalidated when the password of the user is reset. When using the securecookie session backend, the sessions are NOT invalidated and still require changing the secure key and restarting the webserver (and logging out all other users), but the user resetting the password is informed about it with a flash message warning displayed in the UI. Documentation is also updated explaining this behaviour. Users of Apache Airflow are advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulne
Users of Apache Airflow are advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/33347 - https://lists.apache.org/thread/9rdmv8ln4y4ncbyrlmjrsj903x4l80nj - https://www.openwall.com/lists/oss-security/2023/08/23/1
CVE ID: CVE-2023-40274 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T15:03:49.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account for sequences of special path control characters (../) in the URL when serving a file, which allows one to escape the webroot of the server and read arbitrary files from the filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
rary files from the filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getzola/zola/issues/2257 - https://github.com/getzola/zola/pull/2258
CVE ID: CVE-2023-40275 State: PUBLISHED Published: 2024-03-19T00:00:00.000Z Last Updated: 2025-04-10T20:22:18.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40275/blob/main/CVE-2023-40275_Unauthenticated-Patient-List-Retrieval_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40276 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-29T17:25:33.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40276/blob/main/CVE-2023-40276_Unauthenticated-File-Download_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40277 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-19T19:37:24.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp message parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40277/blob/main/CVE-2023-40277_Reflected-XSS_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40278 State: PUBLISHED Published: 2024-03-19T00:00:00.000Z Last Updated: 2025-04-10T20:19:49.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error message. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Inform
ceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Information-Disclosure_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40279 State: PUBLISHED Published: 2024-03-19T00:00:00.000Z Last Updated: 2025-04-10T20:19:15.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40279/blob/main/CVE-2023-40279_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40280 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-02T18:31:53.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/projects/open-clinic/ - https://github.com/BugBountyHunterCVE/CVE-2023-40280/blob/main/CVE-2023-40280_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md
CVE ID: CVE-2023-40281 State: PUBLISHED Published: 2023-08-17T06:37:01.773Z Last Updated: 2024-10-08T17:38:02.195Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 2 series Problem Types: Cross-site scripting (XSS) Description: EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ec-cube.net/info/weakness/20230727/ - https://jvn.jp/en/jp/JVN4699
r: - CISA ADP Vulnrichment: References: - https://www.ec-cube.net/info/weakness/20230727/ - https://jvn.jp/en/jp/JVN46993816/
CVE ID: CVE-2023-40282 State: PUBLISHED Published: 2023-08-23T03:16:56.417Z Last Updated: 2025-07-01T14:01:12.204Z Vendors: Rakuten Mobile, Inc. Products: Rakuten WiFi Pocket Problem Types: Improper authentication Description: Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://network.mobile.rakuten.co.jp/product/internet/rakuten-wifi-pocket/support/ - https://jvn.jp/en/jp/JVN55217369/
CVE ID: CVE-2023-40283 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-08-02T18:31:53.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 - https://github.com/torvalds/linux/commit/1728137b33c00d5a2b5110ed7aafb42e7c32e4a1 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10 - https://www.de
728137b33c00d5a2b5110ed7aafb42e7c32e4a1 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10 - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.org/security/2023/dsa-5492 - http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20231020-0007/ - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-40284 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-05T14:42:05.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40285 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-12-06T21:16:17.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40286 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-03T19:24:37.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40287 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-05T14:45:07.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40288 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-05T14:47:37.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40289 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-06T14:58:54.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40290 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-10-28T16:04:49.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_center#%21advisories - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE ID: CVE-2023-40291 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:59:53.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://autohack.in/2023/07/26/dude-its-my-car-how-to-develop-intimacy-with-your-car/
CVE ID: CVE-2023-40292 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:57:14.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://autohack.in/2023/07/26/dude-its-my-car-how-to-develop-intimacy-with-your-car/
CVE ID: CVE-2023-40293 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:56:41.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://autohack.in/2023/07/26/dude-its-my-car-how-to-develop-intimacy-with-your-car/
CVE ID: CVE-2023-40294 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T15:48:42.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0branch/boron/issues/3
CVE ID: CVE-2023-40295 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:54:36.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0branch/boron/issues/3
CVE ID: CVE-2023-40296 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:53:45.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eminfedar/async-sockets-cpp/issues/32
CVE ID: CVE-2023-40297 State: PUBLISHED Published: 2024-05-15T19:57:07.010Z Last Updated: 2025-02-13T15:46:49.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sahar042/CVE-2023-40297
CVE ID: CVE-2023-40299 State: PUBLISHED Published: 2023-10-04T00:00:00 Last Updated: 2024-09-20T13:12:24.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://insomnia.rest/changelog - https://github.com/Kong/insomnia/releases - https://www.angelystor.com/posts/cve-2023-40299/ - https://github.com/Kong/insomnia/pull/6217/commits
CVE ID: CVE-2023-40300 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-10-09T14:00:41.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2023-40301 State: PUBLISHED Published: 2023-12-07T00:00:00.000Z Last Updated: 2025-05-28T15:17:55.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2023-40302 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T18:31:52.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2023-40303 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-08-02T18:31:53.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process. Additional Analyst Notes: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=e4e65c03f4c11292a3e40ef72ca3f194c8bffdd6 - https://lists.gnu.org/
s://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=e4e65c03f4c11292a3e40ef72ca3f194c8bffdd6 - https://lists.gnu.org/archive/html/bug-inetutils/2023-07/msg00000.html - https://ftp.gnu.org/gnu/inetutils/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00013.html - http://www.openwall.com/lists/oss-security/2023/12/30/4 - https://lists.debian.org/debian-lts-announce/2023/10/msg00013.html
CVE ID: CVE-2023-40305 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:53:07.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://savannah.gnu.org/bugs/index.php?64503 - https://ftp.gnu.org/gnu/indent/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W6SL3NKMH5R4S5PD2O3MTC2UR4SBVHK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6F
/lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MIUH3F63KQJWYR3FLKRZUYYRJOY6FYX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB6GB6FUFPV5VJAZIANDG4YNNDW6JNXX/
CVE ID: CVE-2023-40306 State: PUBLISHED Published: 2023-09-08T21:05:24.877Z Last Updated: 2024-09-25T20:04:01.418Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) Problem Types: CWE-601 Description: SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3156972 - https://https://www.sap.com
Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3156972 - https://https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40307 State: PUBLISHED Published: 2023-09-28T13:55:49.371Z Last Updated: 2024-09-23T15:05:06.102Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: SAP SE Products: SAP Privileges Problem Types: CWE-787 Description: An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit input which causes a buffer overflow resulting in a crash of the application. This could make the application unavailable and allow reading or modification of data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SAP/macOS-enterprise-privileges/security/a
Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SAP/macOS-enterprise-privileges/security/advisories/GHSA-rgq4-wxpj-5jv9
CVE ID: CVE-2023-40308 State: PUBLISHED Published: 2023-09-12T01:21:15.083Z Last Updated: 2024-09-26T18:22:53.534Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP CommonCryptoLib, SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise, SAP Web Dispatcher, SAP Content Server, SAP HANA Database, SAP Host Agent, SAP Extended Application Services and Runtime (XSA), SAPSSOEXT Problem Types: CWE-787 Description: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to cras
ubmitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3327896 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40309 State: PUBLISHED Published: 2023-09-12T02:21:19.058Z Last Updated: 2024-09-28T22:10:46.845Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SAP_SE Products: SAP CommonCryptoLib, SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise, SAP Web Dispatcher, SAP Content Server, SAP HANA Database, SAP Host Agent, SAP Extended Application Services and Runtime (XSA), SAPSSOEXT Problem Types: CWE-863 Description: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending
ult in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3340576 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-40310 State: PUBLISHED Published: 2023-10-10T01:35:28.068Z Last Updated: 2024-09-18T19:07:54.006Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP PowerDesigner Client Problem Types: CWE-112 Description: SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP PowerDesigner Client. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/335
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3357154 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html