Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6342 State: PUBLISHED Published: 2020-09-09T12:44:17 Last Updated: 2024-08-04T09:02:39.655Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1152/
CVE ID: CVE-2020-6343 State: PUBLISHED Published: 2020-09-09T12:44:33 Last Updated: 2024-08-04T09:02:39.027Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1151/
CVE ID: CVE-2020-6344 State: PUBLISHED Published: 2020-09-09T12:51:29 Last Updated: 2024-08-04T09:02:39.585Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1150/
CVE ID: CVE-2020-6345 State: PUBLISHED Published: 2020-09-09T12:51:37 Last Updated: 2024-08-04T09:02:39.025Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1160/
CVE ID: CVE-2020-6346 State: PUBLISHED Published: 2020-09-09T12:53:02 Last Updated: 2024-08-04T09:02:39.568Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1163/
CVE ID: CVE-2020-6347 State: PUBLISHED Published: 2020-09-09T12:53:19 Last Updated: 2024-08-04T09:02:39.820Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1164/
CVE ID: CVE-2020-6348 State: PUBLISHED Published: 2020-09-09T12:52:54 Last Updated: 2024-08-04T09:02:39.054Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1165/
CVE ID: CVE-2020-6349 State: PUBLISHED Published: 2020-09-09T12:53:26 Last Updated: 2024-08-04T09:02:39.581Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1166/
CVE ID: CVE-2020-6350 State: PUBLISHED Published: 2020-09-09T12:53:09 Last Updated: 2024-08-04T09:02:39.060Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1167/
CVE ID: CVE-2020-6351 State: PUBLISHED Published: 2020-09-09T12:53:34 Last Updated: 2024-08-04T09:02:40.186Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1147/
CVE ID: CVE-2020-6352 State: PUBLISHED Published: 2020-09-09T12:53:41 Last Updated: 2024-08-04T09:02:39.625Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1148/
CVE ID: CVE-2020-6353 State: PUBLISHED Published: 2020-09-09T12:54:09 Last Updated: 2024-08-04T09:02:39.581Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1149/
CVE ID: CVE-2020-6354 State: PUBLISHED Published: 2020-09-09T12:53:51 Last Updated: 2024-08-04T09:02:39.617Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1158/
CVE ID: CVE-2020-6355 State: PUBLISHED Published: 2020-09-09T12:55:00 Last Updated: 2024-08-04T09:02:40.161Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1161/
CVE ID: CVE-2020-6356 State: PUBLISHED Published: 2020-09-09T12:54:01 Last Updated: 2024-08-04T09:02:39.676Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1162/
CVE ID: CVE-2020-6357 State: PUBLISHED Published: 2020-09-09T12:54:16 Last Updated: 2024-08-04T09:02:39.941Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1168/
CVE ID: CVE-2020-6358 State: PUBLISHED Published: 2020-09-09T12:55:18 Last Updated: 2024-08-04T09:02:40.474Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1169/
CVE ID: CVE-2020-6359 State: PUBLISHED Published: 2020-09-09T12:55:34 Last Updated: 2024-08-04T09:02:39.983Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1170/
CVE ID: CVE-2020-6360 State: PUBLISHED Published: 2020-09-09T12:55:09 Last Updated: 2024-08-04T09:02:39.571Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/296081
ation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1171/
CVE ID: CVE-2020-6361 State: PUBLISHED Published: 2020-09-09T12:54:26 Last Updated: 2024-08-04T09:02:40.171Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/29608
dation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2960815 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - https://www.zerodayinitiative.com/advisories/ZDI-20-1172/
CVE ID: CVE-2020-6362 State: PUBLISHED Published: 2020-10-20T13:31:51 Last Updated: 2024-08-04T09:02:39.846Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP Banking Services Problem Types: Incorrect Authorization Description: SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected reports are protected with otherauthorization objects, exploitation of the vulnerability could lead to privilege escalation and violation in segregation of duties, which in turn could lead to Service interruptions and system unavailability for the victim and users of the component. Additional Analyst
ld lead to Service interruptions and system unavailability for the victim and users of the component. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2953212
CVE ID: CVE-2020-6363 State: PUBLISHED Published: 2020-10-15T01:53:18 Last Updated: 2024-08-04T09:02:39.615Z Vendors: SAP SE Products: SAP Commerce Cloud Problem Types: Insufficient Session Expiration Description: SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username/passphrase credentials. The user can change their own passphrase, but this does not invalidate active sessions that the user may have with SAP Commerce Cloud web applications, which gives an attacker the opportunity to reuse old session credentials, resulting in Insufficient Session
plications, which gives an attacker the opportunity to reuse old session credentials, resulting in Insufficient Session Expiration. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2965287
CVE ID: CVE-2020-6364 State: PUBLISHED Published: 2020-10-15T01:55:24 Last Updated: 2024-08-04T09:02:40.251Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager) Problem Types: Code Injection Description: SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to
ver the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to read and modify all system files and also impact system availability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2969828 - http://seclists.org/fulldisclosure/2021/Jun/28 - http://packetstormsecurity.com/files/163153/SAP-Wily-Introscope-Enterprise-OS-Command-Injection.html
CVE ID: CVE-2020-6365 State: PUBLISHED Published: 2020-10-15T02:03:40 Last Updated: 2024-08-04T09:02:39.998Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver Application Server Java Problem Types: Reverse Tabnabbing Description: SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirect users to a malicious site due to insufficient reverse tabnabbing URL validation. The attacker could execute phishing attacks to steal credentials of the victim or to redirect users to untrusted web pages containing malware or similar malicious exploits. Additional A
of the victim or to redirect users to untrusted web pages containing malware or similar malicious exploits. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2969828
CVE ID: CVE-2020-6366 State: PUBLISHED Published: 2020-10-20T13:27:03 Last Updated: 2024-08-04T09:02:39.996Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: SAP SE Products: SAP NetWeaver (Compare Systems) Problem Types: Missing XML Validation Description: SAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
alyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2969457