Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
A ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-27867 State: PUBLISHED Published: 2024-06-26T03:12:26.594Z Last Updated: 2025-02-13T17:47:08.703Z Vendors: Apple Products: AirPods Firmware Update A, AirPods Firmware Update F, and Beats Firmware Update F Problem Types: When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones Description: An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request
A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214111 - https://support.apple.com/kb/HT214111 - http://seclists.org/fulldisclosure/2024/Jul/2
CVE ID: CVE-2024-27869 State: PUBLISHED Published: 2024-09-16T23:22:20.064Z Last Updated: 2025-11-04T16:11:33.803Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to record the screen without an indicator Description: The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an indicator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-27871 State: PUBLISHED Published: 2024-07-29T22:17:22.604Z Last Updated: 2025-11-04T17:19:10.291Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to access protected user data Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214119 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-27872 State: PUBLISHED Published: 2024-07-29T22:16:28.477Z Last Updated: 2025-11-04T17:19:11.659Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214119 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-27873 State: PUBLISHED Published: 2024-07-29T22:16:40.354Z Last Updated: 2025-11-04T17:19:17.116Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Processing a maliciously crafted video file may lead to unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT2
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-27874 State: PUBLISHED Published: 2024-09-16T23:22:39.007Z Last Updated: 2025-11-04T16:11:34.745Z Vendors: Apple Products: iOS and iPadOS Problem Types: A remote attacker may be able to cause a denial-of-service Description: This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-27875 State: PUBLISHED Published: 2024-09-16T23:22:39.961Z Last Updated: 2025-11-04T16:11:35.820Z Vendors: Apple Products: macOS Problem Types: Privacy Indicators for microphone or camera access may be attributed incorrectly Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15. Privacy Indicators for microphone or camera access may be attributed incorrectly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-27876 State: PUBLISHED Published: 2024-09-16T23:23:00.127Z Last Updated: 2025-11-04T16:11:41.560Z Vendors: Apple Products: macOS, visionOS, iOS and iPadOS Problem Types: Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files Description: A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121234 -
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121234 - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121246 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-27877 State: PUBLISHED Published: 2024-07-29T22:17:03.511Z Last Updated: 2025-11-04T17:19:21.220Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-u
chment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-27878 State: PUBLISHED Published: 2024-07-29T22:16:44.478Z Last Updated: 2025-11-04T17:19:22.572Z Vendors: Apple Products: macOS Problem Types: An app with root privileges may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app with root privileges may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214119 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-27879 State: PUBLISHED Published: 2024-09-16T23:22:49.382Z Last Updated: 2025-11-04T16:11:43.441Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker may be able to cause unexpected app termination Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121246 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-27880 State: PUBLISHED Published: 2024-09-16T23:22:47.649Z Last Updated: 2025-11-04T16:11:48.188Z Vendors: Apple Products: macOS, tvOS, visionOS, iOS and iPadOS, watchOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. Processing a maliciously crafted file may lead to unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com
ion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121248 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121246 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121247 - https://support.apple.com/en-us/121240
CVE ID: CVE-2024-27881 State: PUBLISHED Published: 2024-07-29T22:16:46.234Z Last Updated: 2025-11-04T17:19:26.806Z Vendors: Apple Products: macOS Problem Types: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to access information about a user’s contacts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http:
t.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-27882 State: PUBLISHED Published: 2024-07-29T22:17:06.133Z Last Updated: 2025-11-04T17:19:30.906Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldis
4120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-27883 State: PUBLISHED Published: 2024-07-29T22:16:53.720Z Last Updated: 2025-11-04T17:19:35.033Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldis
CVE ID: CVE-2024-27884 State: PUBLISHED Published: 2024-07-29T22:17:19.135Z Last Updated: 2025-03-13T17:58:41.173Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS, watchOS, tvOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Sonoma 14.5, watchOS 10.5, visionOS 1.2, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214108 - https://sup
e.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214108 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101 - https://support.apple.com/kb/HT214108
CVE ID: CVE-2024-27885 State: PUBLISHED Published: 2024-06-10T20:56:45.402Z Last Updated: 2025-03-13T17:10:26.121Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/kb
107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214106
CVE ID: CVE-2024-27886 State: PUBLISHED Published: 2024-07-29T22:16:35.305Z Last Updated: 2025-11-04T16:11:49.133Z Vendors: Apple Products: macOS Problem Types: An unprivileged app may be able to log keystrokes in other apps including those using secure input mode Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214084 - https://support.apple.com/kb/HT214084
CVE ID: CVE-2024-27887 State: PUBLISHED Published: 2024-07-29T22:16:31.955Z Last Updated: 2025-02-13T17:47:11.177Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214084 - https://support.apple.com/kb/HT214084
CVE ID: CVE-2024-27888 State: PUBLISHED Published: 2024-07-29T22:17:24.302Z Last Updated: 2025-02-13T17:47:11.733Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214084 - https://support.apple.com/kb/HT214084
CVE ID: CVE-2024-27889 State: PUBLISHED Published: 2024-03-04T19:32:33.109Z Last Updated: 2024-08-02T00:41:55.605Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: Arista Edge Threat Management - Arista NG Firewall (NGFW) Problem Types: CWE-89 Description: Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program C
underlying operating system with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.arista.com/en/support/advisories-notices/security-advisory/19038-security-advisory-0093
CVE ID: CVE-2024-27894 State: PUBLISHED Published: 2024-03-12T18:19:41.084Z Last Updated: 2025-02-13T17:47:12.314Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-20, CWE-552 Description: The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the function's implementation is referenced by a URL. The supported URL schemes include "file", "http", and "https". When a function is created using this method, the Functions Worker will retrieve the implementation from the URL provided by the user. However, this feature introduces a vulnerability
er will retrieve the implementation from the URL provided by the user. However, this feature introduces a vulnerability that can be exploited by an attacker to gain unauthorized access to any file that the Pulsar Functions Worker process has permissions to read. This includes reading the process environment which potentially includes sensitive information, such as secrets. Furthermore, an attacker could leverage this vulnerability to use the Pulsar Functions Worker as a proxy to access the content of remote HTTP and HTTPS endpoint URLs. This could also be used to carry out denial of service attacks. This vulnerability also applies to the Pulsar Broker when it is configured with "functionsWor
denial of service attacks. This vulnerability also applies to the Pulsar Broker when it is configured with "functionsWorkerEnabled=true". This issue affects Apache Pulsar versions from 2.4.0 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10 Pulsar Function Worker users should upgrade to at least 2.10.6. 2.11 Pulsar Function Worker users should upgrade to at least 2.11.4. 3.0 Pulsar Function Worker users should upgrade to at least 3.0.3. 3.1 Pulsar Function Worker users should upgrade to at least 3.1.3. 3.2 Pulsar Function Worker users should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforemen
rs should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions. The updated versions of Pulsar Functions Worker will, by default, impose restrictions on the creation of functions using URLs. For users who rely on this functionality, the Function Worker configuration provides two configuration keys: "additionalEnabledConnectorUrlPatterns" and "additionalEnabledFunctionsUrlPatterns". These keys allow users to specify a set of URL patterns that are permitted, enabling the creation of functions using URLs that match the defined patterns. This approach ensures that the feature remains available to t
n of functions using URLs that match the defined patterns. This approach ensures that the feature remains available to those who require it, while limiting the potential for unauthorized access and exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/45cqhgqg8d19ongjw18ypcss8vwh206p - https://pulsar.apache.org/security/CVE-2024-27894/ - http://www.openwall.com/lists/oss-security/2024/03/12/11
CVE ID: CVE-2024-27895 State: PUBLISHED Published: 2024-04-08T09:23:07.774Z Last Updated: 2025-03-28T19:29:06.466Z Vendors: Huawei Products: HarmonyOS Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2024-27896 State: PUBLISHED Published: 2024-04-08T09:24:17.171Z Last Updated: 2024-11-29T15:10:27.763Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2024-27897 State: PUBLISHED Published: 2024-04-08T09:25:40.641Z Last Updated: 2024-08-02T00:41:55.777Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2024-27898 State: PUBLISHED Published: 2024-04-09T00:52:54.390Z Last Updated: 2024-08-21T15:07:15.427Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Problem Types: CWE-918 Description: SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. Thus, having a low impact on confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
y. Thus, having a low impact on confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3425188 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-27899 State: PUBLISHED Published: 2024-04-09T00:54:17.167Z Last Updated: 2025-08-27T15:48:33.372Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: SAP_SE Products: SAP NetWeaver AS Java User Management Engine Problem Types: CWE-640 Description: Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements for the content of the newly defined security answer. This can be leveraged by an attacker to cause profound impact on confidentiality and low impact on both integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere