Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26814 State: PUBLISHED Published: 2020-11-10T16:14:29 Last Updated: 2024-08-04T16:03:22.683Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP SE Products: SAP Process Integration (PGP - Module Business-to-Business Add On) Problem Types: Information Disclosure Description: SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wi
he module leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2952084
CVE ID: CVE-2020-26815 State: PUBLISHED Published: 2020-11-10T16:13:00 Last Updated: 2024-08-04T16:03:22.733Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: SAP SE Products: SAP Fiori Launchpad (News Tile Application) Problem Types: Server Side Request Forgery Description: SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network to retrieve sensitive / confidential resources which are otherwise restricted for inte
ttacker from the external network to retrieve sensitive / confidential resources which are otherwise restricted for internal usage only, resulting in a Server-Side Request Forgery vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2984627
CVE ID: CVE-2020-26816 State: PUBLISHED Published: 2020-12-09T16:28:11 Last Updated: 2024-08-04T16:03:22.694Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: SAP SE Products: SAP NetWeaver AS JAVA (Key Storage Service) Problem Types: Missing Encryption Description: SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access to the SAP NetWeaver AS Java to decode the keys because of missing encryption and get some applicatio
ministrator access to the SAP NetWeaver AS Java to decode the keys because of missing encryption and get some application data and client credentials of adjacent systems. This highly impacts Confidentiality as information disclosed could contain client credentials of adjacent systems. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2971163 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079
CVE ID: CVE-2020-26817 State: PUBLISHED Published: 2020-11-10T16:15:35 Last Updated: 2024-08-04T16:03:22.767Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.
lidation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2985094 - https://www.zerodayinitiative.com/advisories/ZDI-20-1364/
CVE ID: CVE-2020-26818 State: PUBLISHED Published: 2020-11-10T16:17:12 Last Updated: 2024-08-04T16:03:22.370Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP SE Products: SAP NetWeaver AS ABAP (Web Dynpro) Problem Types: Information Disclosure Description: SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wi
zation, resulting in Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2971954
CVE ID: CVE-2020-26819 State: PUBLISHED Published: 2020-11-10T16:13:34 Last Updated: 2024-08-04T16:03:23.072Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver AS ABAP (Web Dynpro) Problem Types: Improper Access Control Description: SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database logfiles because of Improper Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.suppor
Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2971954
CVE ID: CVE-2020-26820 State: PUBLISHED Published: 2020-11-10T16:14:04 Last Updated: 2024-08-04T16:03:22.700Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver AS JAVA Problem Types: Privilege escalation Description: SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate mechanism to execute OS commands through the uploaded file leading to Privilege Escalation and completely compromise the confi
ism to execute OS commands through the uploaded file leading to Privilege Escalation and completely compromise the confidentiality, integrity and availability of the server operating system and any application running on it. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2979062 - http://seclists.org/fulldisclosure/2021/Apr/7 - http://packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html
CVE ID: CVE-2020-26821 State: PUBLISHED Published: 2020-11-10T16:17:32 Last Updated: 2024-08-04T16:03:22.410Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP SE Products: SAP Solution Manager (JAVA stack) Problem Types: Missing Authorization Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.su
ram Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2985866
CVE ID: CVE-2020-26822 State: PUBLISHED Published: 2020-11-10T16:15:01 Last Updated: 2024-08-04T16:03:22.328Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP SE Products: SAP Solution Manager (JAVA stack) Problem Types: Missing Authorization Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - ht
Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2985866
CVE ID: CVE-2020-26823 State: PUBLISHED Published: 2020-11-10T16:17:49 Last Updated: 2024-08-04T16:03:22.605Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP SE Products: SAP Solution Manager (JAVA stack) Problem Types: Missing Authorization Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571
alyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2985866
CVE ID: CVE-2020-26824 State: PUBLISHED Published: 2020-11-10T16:16:44 Last Updated: 2024-08-04T16:03:22.411Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: SAP SE Products: SAP Solution Manager (JAVA stack) Problem Types: Missing Authorization Description: SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an impact to the integrity and availability of the service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launc
VE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2985866
CVE ID: CVE-2020-26825 State: PUBLISHED Published: 2020-11-13T14:28:00 Last Updated: 2024-08-04T16:03:22.699Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP Fiori Launchpad (News Tile Application) Problem Types: Reflected Cross Site Scripting Description: SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a different end user (victim), because News tile does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Information maintained in the vi
ser controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Information maintained in the victim's web browser can be read, modified, and sent to the attacker. The malicious code cannot significantly impact the victim's browser and the victim can easily close the browser tab to terminate it. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 - https://launchpad.support.sap.com/#/notes/2984627
CVE ID: CVE-2020-26826 State: PUBLISHED Published: 2020-12-09T16:30:35 Last Updated: 2024-08-04T16:03:22.433Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP SE Products: SAP NetWeaver AS JAVA Problem Types: Unrestricted File Upload Description: Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without proper file format validation, leading to Unrestricted File Upload. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2974330
CVE ID: CVE-2020-26828 State: PUBLISHED Published: 2020-12-09T16:30:20 Last Updated: 2024-08-04T16:03:22.743Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP Disclosure Management. Problem Types: Formula Injection Description: SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types it is possible to enter formulas which can call external applications or execute scripts. The execution of a payload (script) on target machine could be used to steal and modify the data available in the spreadsheet Additional Analyst Notes: - CVE Program Con
hine could be used to steal and modify the data available in the spreadsheet Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2971180
CVE ID: CVE-2020-26829 State: PUBLISHED Published: 2020-12-09T16:28:43 Last Updated: 2024-08-04T16:03:22.449Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver AS JAVA (P2P Cluster Communication) Problem Types: Missing Authentication Check Description: SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would other
the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2974774 - http://seclists.org/fulldisclosure/2021/Jun/33 - http://packetstormsecurity.com/files/163166/SAP-Netweaver-JAVA-7.50-Missing-Authorization.html
CVE ID: CVE-2020-26830 State: PUBLISHED Published: 2020-12-09T16:29:34 Last Updated: 2024-08-04T16:03:22.653Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: SAP SE Products: SAP Solution Manager (User Experience Monitoring) Problem Types: Missing Authorization Description: SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain detail
ed to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain details about the configured SAP Solution Manager agents, Deploy a malicious User Experience Monitoring script. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2983204 - http://seclists.org/fulldisclosure/2021/Jun/29 - http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html
CVE ID: CVE-2020-26831 State: PUBLISHED Published: 2020-12-09T16:29:55 Last Updated: 2024-08-04T16:03:22.943Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: SAP SE Products: SAP BusinessObjects BI Platform (Crystal Report) Problem Types: Missing XML Validation Description: SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-serv
ding to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2989075
CVE ID: CVE-2020-26832 State: PUBLISHED Published: 2020-12-09T16:31:03 Last Updated: 2024-08-04T16:03:22.474Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H) Vendors: SAP SE Products: SAP NetWeaver AS ABAP (SAP Landscape Transformation), SAP S4 HANA (SAP Landscape Transformation) Problem Types: Missing Authorization Description: SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to mi
, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2993132 - http://seclists.org/fulldisclosure/2022/May/42 - http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html
CVE ID: CVE-2020-26834 State: PUBLISHED Published: 2020-12-09T16:30:45 Last Updated: 2024-08-04T16:03:22.211Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP SE Products: SAP HANA Database Problem Types: Improper Authentication Description: SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML bearer token was issued. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/v
token was issued. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2978768
CVE ID: CVE-2020-26835 State: PUBLISHED Published: 2020-12-09T16:30:53 Last Updated: 2024-08-04T16:03:22.606Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver AS ABAP Problem Types: Cross Site Scripting Description: SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchp
Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2996479
CVE ID: CVE-2020-26836 State: PUBLISHED Published: 2020-12-09T16:31:34 Last Updated: 2024-08-04T16:03:22.578Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: SAP SE Products: SAP Solution Manager (Trace Analysis) Problem Types: Open Redirect Description: SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack. Additional Anal
the application URL and share it with the end user who could potentially become a victim of the attack. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2938650 - http://seclists.org/fulldisclosure/2021/Jun/25 - http://packetstormsecurity.com/files/163136/SAP-Solution-Manager-7.2-ST-720-Open-Redirection.html
CVE ID: CVE-2020-26837 State: PUBLISHED Published: 2020-12-09T16:31:24 Last Updated: 2024-08-04T16:03:22.675Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: SAP SE Products: SAP Solution Manager (User Experience Monitoring) Problem Types: Path Traversal Description: SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise confidentiality exposing elements of the file system, partially compromise integrity allowing the modification of some configurations and partially compromise availability by making certain services u
rity allowing the modification of some configurations and partially compromise availability by making certain services unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2983204 - http://seclists.org/fulldisclosure/2021/Jun/32 - http://packetstormsecurity.com/files/163160/SAP-Solution-Manager-7.2-File-Disclosure-Denial-Of-Service.html
CVE ID: CVE-2020-26838 State: PUBLISHED Published: 2020-12-09T16:31:14 Last Updated: 2024-08-04T16:03:22.812Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Business Warehouse, SAP BW4HANA Problem Types: Code Injection Description: SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code I
ion. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 - https://launchpad.support.sap.com/#/notes/2983367
CVE ID: CVE-2020-26839 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26840 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26841 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26842 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26843 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26844 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.