Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-2421 State: PUBLISHED Published: 2018-05-09T20:00:00 Last Updated: 2024-08-05T04:21:33.262Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP Internet Graphics Server (IGS) Problem Types: Denial-of-Service Description: SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ - https://launchpad.support.sap.com/#/notes/2616599 - http://www.securityfocus.com
5/08/sap-security-patch-day-may-2018/ - https://launchpad.support.sap.com/#/notes/2616599 - http://www.securityfocus.com/bid/104111
CVE ID: CVE-2018-2422 State: PUBLISHED Published: 2018-05-09T20:00:00 Last Updated: 2024-08-05T04:21:33.273Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP Internet Graphics Server (IGS) Problem Types: Denial-of-Service Description: SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104110 - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ - https://launchpad.support.sap.com/#/no
/bid/104110 - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ - https://launchpad.support.sap.com/#/notes/2617553
CVE ID: CVE-2018-2423 State: PUBLISHED Published: 2018-05-09T20:00:00 Last Updated: 2024-08-05T04:21:33.234Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP Internet Graphics Server (IGS) Problem Types: Denial-of-Service Description: SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/ - http://www.securityfocus.com/bid/104109 - https://launchpad.support.sa
com/2018/05/08/sap-security-patch-day-may-2018/ - http://www.securityfocus.com/bid/104109 - https://launchpad.support.sap.com/#/notes/2620744
CVE ID: CVE-2018-2424 State: PUBLISHED Published: 2018-06-12T15:00:00 Last Updated: 2024-08-05T04:21:33.271Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SAP SE Products: SAP HANA Database, SAP UI5, SAP UI5(Java), SAP UI, SAP UI for SAP NetWeaver 7.00 Problem Types: Cross-Site Scripting Description: SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP
e 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00 Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2538856 - http://www.securityfocus.com/bid/104459 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
CVE ID: CVE-2018-2425 State: PUBLISHED Published: 2018-06-12T15:00:00 Last Updated: 2024-08-05T04:21:34.073Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Business One Problem Types: Information Disclosure Description: Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104438 - https://launchpad.support.sap.com/#/notes/2588475 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
CVE ID: CVE-2018-2427 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.218Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Suite, SAP Crystal Reports Problem Types: Code Injection Description: SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2620738 - http://www.securityfocus.com/bid/104715 - https://wi
: References: - https://launchpad.support.sap.com/#/notes/2620738 - http://www.securityfocus.com/bid/104715 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2428 State: PUBLISHED Published: 2018-06-12T15:00:00 Last Updated: 2024-08-05T04:21:33.243Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP SE Products: SAP Infrastructure, SAP UI, SAP UI for SAP NetWeaver 7.00 Problem Types: Information Disclosure Description: Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2621121 - http://www.
al Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2621121 - http://www.securityfocus.com/bid/104446 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
CVE ID: CVE-2018-2431 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:34.117Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Suite Problem Types: Cross-Site Scripting Description: SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104695 - https://launchpad.support.sap.com/#/notes/2624762 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2432 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.601Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) Problem Types: Header Manipulation Description: SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an attacker to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advanced attacks, including: cross-site scripting and page hijacking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
ipting and page hijacking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104716 - https://launchpad.support.sap.com/#/notes/2523290 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2433 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.652Z Vendors: SAP Products: SAP Gateway Problem Types: Denial of Service Description: SAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.53) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2597913 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2434 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.594Z Vendors: SAP Products: SAP NetWeaver (UI_Infra), SAP UI Implementation for Decoupled Innovations (UI_700), SAP NetWeaver , SAP User Interface Technology (SAP_UI) Problem Types: Content Spoofing Description: A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end user: UI add-on for SAP NetWeaver (UI_Infra, 1.0), SAP UI Implementation for Decoupled Innovations (UI_700, 2.0): SAP NetWeaver 7.00 Implementation, SAP User Interface Technology (SAP_UI 7.4, 7.5, 7.51, 7.52). There is little impa
0): SAP NetWeaver 7.00 Implementation, SAP User Interface Technology (SAP_UI 7.4, 7.5, 7.51, 7.52). There is little impact as it is not possible to embed active contents such as JavaScript or hyperlinks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105088 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000 - https://launchpad.support.sap.com/#/notes/2633180
CVE ID: CVE-2018-2435 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.642Z Vendors: SAP Products: SAP NetWeaver Enterprise Portal Problem Types: Cross-Site Scripting Description: SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2643126 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000 - http://www.securityfocus.com/bid/104706
CVE ID: CVE-2018-2436 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.805Z Vendors: SAP Products: SAP R/3 Enterprise Retail Problem Types: Missing Authentication Description: Executing transaction WRCK in SAP R/3 Enterprise Retail (EHP6) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2652578 - http://www.securityfocus.com/bid/104703 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2437 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:34.111Z Vendors: SAP Products: SAP Internet Graphics Server (IGS) Problem Types: Disclosure of information and malicious file insertion or modification. Description: The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104705 - https://launchpad.support.sap.com/#/notes/2644227 - https://wiki.scn.sap.com/wiki/pages/viewpage.
focus.com/bid/104705 - https://launchpad.support.sap.com/#/notes/2644227 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2438 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.267Z Vendors: SAP Products: SAP Internet Graphics Server (IGS) Problem Types: Denial of Service Description: The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of-service vulnerabilities that allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104707 - https://launchpad.support.sap.com/#/notes/2644238 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2439 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:33.655Z Vendors: SAP Products: SAP Internet Graphics Server (IGS) Problem Types: Code Injection Description: The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server (IGS) did not require sufficient input validation. Namely, the SAP Internet Graphics Server (IGS) HTTP and RFC listener, SAP Internet Graphics Server (IGS) portwatcher when registering a portwat
t Graphics Server (IGS) HTTP and RFC listener, SAP Internet Graphics Server (IGS) portwatcher when registering a portwatcher to the multiplexer and the SAP Internet Graphics Server (IGS) multiplexer had insufficient input validation and thus allowing a malformed data packet to cause a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104708 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000 - https://launchpad.support.sap.com/#/notes/2644147
CVE ID: CVE-2018-2440 State: PUBLISHED Published: 2018-07-10T18:00:00 Last Updated: 2024-08-05T04:21:34.275Z Vendors: SAP Products: SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions) Problem Types: Information Disclosure Description: Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7 and 8.5) exposes sensitive information in the application logs. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2664767 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
CVE ID: CVE-2018-2441 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.237Z Vendors: SAP Products: SAP Change and Transport System (ABAP) Problem Types: Information Disclosure Description: Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105090 - https://launchpad.support.sap.com/#/notes/2671160 - htt
ntainer: References: - http://www.securityfocus.com/bid/105090 - https://launchpad.support.sap.com/#/notes/2671160 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2442 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.652Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Problem Types: Cross-Site Request Forgery Description: In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2407193 - http://www.securityfocus.com/bid/105078 - https://wiki.scn.sap.com/wiki/pages/viewpage.action
.sap.com/#/notes/2407193 - http://www.securityfocus.com/bid/105078 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2444 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:34.250Z Vendors: SAP Products: SAP BusinessObjects Financial Consolidation Problem Types: Cross-Site Scripting Description: SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105087 - https://launchpad.support.sap.com/#/notes/2621395 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2445 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.632Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Platform Problem Types: Server-Side Request Forgery Description: AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105064 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742 - https://launchpad.support.s
ocus.com/bid/105064 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742 - https://launchpad.support.sap.com/#/notes/2630018
CVE ID: CVE-2018-2446 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.622Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Problem Types: Information Disclosure Description: Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2633846 - http://www.securityfocus.com/bid/105089 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2447 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.666Z Vendors: SAP Products: SAP BusinessObjects Business Intelligence Problem Types: SQL Injection Description: SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105075 - https://launchpad.support.sap.com/#/notes/2644154 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2448 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:34.123Z Vendors: SAP Products: SAP SRM-MDM CATALOG Problem Types: Information Disclosure Description: Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105077 - https://launchpad.support.sap.com/#/notes/2653846 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2449 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.631Z Vendors: SAP Products: SAP Supplier Relationship Management Master Data Management Catalog Problem Types: Missing Authentication Description: SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105079 - https://launchpad.support.sap.com/#/notes/2655250 - https://wiki.scn.sap.com/wiki/page
ww.securityfocus.com/bid/105079 - https://launchpad.support.sap.com/#/notes/2655250 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2450 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:33.712Z Vendors: SAP Products: SAP MaxDB (liveCache) Problem Types: SQL Injection Description: SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2660005 - http://www.securityfocus.com/bid/105063 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2451 State: PUBLISHED Published: 2018-08-14T16:00:00 Last Updated: 2024-08-05T04:21:34.168Z Vendors: SAP Products: SAP HANA Extended Application Services Problem Types: Other Description: XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the sess
an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105091 - https://launchpad.support.sap.com/#/notes/2590705 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE ID: CVE-2018-2452 State: PUBLISHED Published: 2018-09-11T15:00:00 Last Updated: 2024-08-05T04:21:33.712Z Vendors: SAP Products: SAP NetWeaver AS Java Problem Types: Cross-Site Scripting Description: The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 - https://launchpad.support.sap.com/#/notes/2623846 - http://www.securityfocus.com/bid/105325
CVE ID: CVE-2018-2454 State: PUBLISHED Published: 2018-09-11T15:00:00 Last Updated: 2024-08-05T04:21:33.882Z Vendors: SAP Products: SAP Enterprise Financial Services Problem Types: Missing Authorization Description: SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_2) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 - https://launchpad.support.sap.com/#/notes/2645133 - http://www.securityfocus.com/bid/105316
CVE ID: CVE-2018-2455 State: PUBLISHED Published: 2018-09-11T15:00:00 Last Updated: 2024-08-05T04:21:33.649Z Vendors: SAP Products: SAP Enterprise Financial Services Problem Types: Missing Authorization Description: SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 - http://www.securityfocus.com/bid/105320 - https://launchpad.support.sap.com/#/notes/2646067
CVE ID: CVE-2018-2457 State: PUBLISHED Published: 2018-09-11T15:00:00 Last Updated: 2024-08-05T04:21:34.337Z Vendors: SAP Products: SAP Adaptive Server Enterprise Problem Types: Information Disclosure Description: Under certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged users to access information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 - https://launchpad.support.sap.com/#/notes/2679788