deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33720
Published: 2021-09-14
Description: A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf
CVE: CVE-2021-33737
Published: 2021-09-14
Description: A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-549234.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-549234.pdf
CVE: CVE-2021-37173
Published: 2021-09-14
Description: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The command line interface of affected devices insufficiently restrict file read and write operations for low privileged users. This could allow an authenticated remote attacker to escalate privileges and gain root access to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf
CVE: CVE-2021-37174
Published: 2021-09-14
Description: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250
References: https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf
CVE: CVE-2021-37175
Published: 2021-09-14
Description: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices do not properly handle permissions to traverse the file system. If exploited, an attacker could gain access to an overview of the complete file system on the affected devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf
CVE: CVE-2021-37176
Published: 2021-09-14
Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper validation of user-supplied data when parsing modfem files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14260)
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1073/; https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf
CVE: CVE-2021-37177
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-471
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37181
Published: 2021-09-14
Description: A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdf
CVE: CVE-2021-37183
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software allows sending send-to-sleep notifications to the managed devices. An unauthenticated attacker in the same network of the affected system can abuse these notifications to cause a Denial-of-Service condition in the managed devices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37184
Published: 2021-09-14
Description: A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdf
CVE: CVE-2021-37186
Published: 2021-09-14
Description: A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), SIMATIC RTU3041C (All versions < V4.0.9). The underlying TCP/IP stack does not properly calculate the random numbers used as ISN (Initial Sequence Numbers). An adjacent attacker with network access to the LAN interface could interfere with traffic, spoof the connection and gain access to sensitive information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf
CVE: CVE-2021-37190
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37191
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could brute force the usernames from the affected software.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-799
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37192
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37193
Published: 2021-09-14
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). An unauthenticated attacker in the same network of the affected system could manipulate certain parameters and set a valid user of the affected software as invalid (or vice-versa).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-471
References: https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf
CVE: CVE-2021-37200
Published: 2021-09-14
Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbitrary files from the underlying filesystem by sending a specially crafted HTTP request.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf
CVE: CVE-2021-37201
Published: 2021-09-14
Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). The web interface of affected devices is vulnerable to a Cross-Site Request Forgery (CSRF) attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative privileges to click on a malicious link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf
CVE: CVE-2021-37202
Published: 2021-09-14
Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf
CVE: CVE-2021-37203
Published: 2021-09-14
Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf
CVE: CVE-2021-37206
Published: 2021-09-14
Description: A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf
CVE: CVE-2021-40354
Published: 2021-09-14
Description: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The "surrogate" functionality on the user profile of the application does not perform sufficient access control that could lead to an account takeover. Any profile on the application can perform this attack and access any other user assigned tasks via the "inbox/surrogate tasks".
CVSS Score: 7.1 (HIGH)
CWE: CWE-267, CWE-269
References: https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf
CVE: CVE-2021-40355
Published: 2021-09-14
Description: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The affected application contains Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to use user-supplied input to access objects directly.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf
CVE: CVE-2021-40356
Published: 2021-09-14
Description: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamcenter V13.2 (All versions < 13.2.0.2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf
CVE: CVE-2021-40357
Published: 2021-09-14
Description: A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf
CVE: CVE-2021-21489
Published: 2021-09-14
Description: SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This would allow an attacker with administrative privileges to store a malicious script on the portal. The execution of the script content by a victim registered on the portal could compromise the confidentiality and integrity of portal content.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3082219; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3082219
CVE: CVE-2021-32202
Published: 2021-09-14
Description: In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/l00neyhacker/CVE-2021-32202; https://github.com/l00neyhacker/CVE-2021-32202
CVE: CVE-2021-33672
Published: 2021-09-14
Description: Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-116
References: https://launchpad.support.sap.com/#/notes/3073891; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3073891
CVE: CVE-2021-33673
Published: 2021-09-14
Description: Under certain conditions, SAP Contact Center - version 700,does not sufficiently encode user-controlled inputs and persists in them. This allows an attacker to exploit a Stored Cross-Site Scripting (XSS) vulnerability when a user browses through the employee directory and to execute arbitrary code on the victim's browser. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3073891; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3073891
CVE: CVE-2021-33674
Published: 2021-09-14
Description: Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability when creating a new email and to execute arbitrary code on the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3073891; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3073891
CVE: CVE-2021-33675
Published: 2021-09-14
Description: Under certain conditions, SAP Contact Center - version 700, does not sufficiently encode user-controlled inputs. This allows an attacker to exploit a Reflected Cross-Site Scripting (XSS) vulnerability through phishing and to execute arbitrary code on the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3073891; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3073891
CVE: CVE-2021-33679
Published: 2021-09-14
Description: The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject a malicious script while creating a new module document, file, or folder. When another user visits that page, the stored malicious script will execute in their session, hence allowing the attacker to compromise their confidentiality and integrity.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3055180; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3055180
CVE: CVE-2021-33685
Published: 2021-09-14
Description: SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://launchpad.support.sap.com/#/notes/3069032; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3069032
CVE: CVE-2021-33686
Published: 2021-09-14
Description: Under certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get access to some encrypted sensitive information, but does not have control over kind or degree.
CVSS Score: 5.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/3070138; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3070138
CVE: CVE-2021-33688
Published: 2021-09-14
Description: SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://launchpad.support.sap.com/#/notes/3069882; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3069882
CVE: CVE-2021-36581
Published: 2021-09-14
Description: Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://kooboo.com; https://github.com/l00neyhacker/CVE-2021-36581/; http://kooboo.com
CVE: CVE-2021-36582
Published: 2021-09-14
Description: In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://kooboo.com; https://github.com/l00neyhacker/CVE-2021-36582; http://kooboo.com
CVE: CVE-2021-37531
Published: 2021-09-14
Description: SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script contained within the malicious XSL file. This can result in a full compromise of the confidentiality, integrity, and availability of the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/165751/SAP-Enterprise-Portal-XSLT-Injection.html; http://seclists.org/fulldisclosure/2022/Jan/75; https://launchpad.support.sap.com/#/notes/3081888
CVE: CVE-2021-37532
Published: 2021-09-14
Description: SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://launchpad.support.sap.com/#/notes/3075546; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3075546
CVE: CVE-2021-37535
Published: 2021-09-14
Description: SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3078609; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405; https://launchpad.support.sap.com/#/notes/3078609