deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-125071
Published: 2023-01-09
Description: A vulnerability was found in lukehutch Gribbit. It has been classified as problematic. Affected is the function messageReceived of the file src/gribbit/request/HttpRequestHandler.java. The manipulation leads to missing origin validation in websockets. The name of the patch is 620418df247aebda3dd4be1dda10fe229ea505dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217716.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1385, CWE-346
References: https://github.com/lukehutch/gribbit/commit/620418df247aebda3dd4be1dda10fe229ea505dd; https://vuldb.com/?ctiid.217716; https://vuldb.com/?id.217716
CVE: CVE-2015-10033
Published: 2023-01-09
Description: A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to apply a patch to fix this issue. The identifier VDB-217713 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-285, CWE-863
References: https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5; https://vuldb.com/?ctiid.217713; https://vuldb.com/?id.217713
CVE: CVE-2015-10034
Published: 2023-01-09
Description: A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue. VDB-217714 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/j-nowak/workout-organizer/commit/13cd6c3d1210640bfdb39872b2bb3597aa991279; https://vuldb.com/?ctiid.217714; https://vuldb.com/?id.217714
CVE: CVE-2015-10035
Published: 2023-01-09
Description: A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae121b46ebfa96a55a9106466ab2ef166ae. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217715.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/gperson/angular-test-reporter/commit/a29d8ae121b46ebfa96a55a9106466ab2ef166ae; https://vuldb.com/?ctiid.217715; https://vuldb.com/?id.217715
CVE: CVE-2021-36603
Published: 2023-01-09
Description: Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/arendst/Tasmota/issues/12221; https://github.com/arendst/Tasmota/issues/12221
CVE: CVE-2022-43970
Published: 2023-01-09
Description: A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the underlying Linux operating system as root. This vulnerablity can be triggered over the network via a malicious POST request to /apply.cgi.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120, CWE-787
References: https://youtu.be/73-1lhvJPNg; https://youtu.be/RfWVYCUBNZ0; https://youtu.be/TeWAmZaKQ_w
CVE: CVE-2022-43971
Published: 2023-01-09
Description: An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware <= 1.0.02 (build3). The do_setNTP function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious GET or POST request to /setNTP.cgi to execute arbitrary commands on the underlying Linux operating system as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://youtu.be/73-1lhvJPNg; https://youtu.be/RfWVYCUBNZ0; https://youtu.be/TeWAmZaKQ_w
CVE: CVE-2022-43972
Published: 2023-01-09
Description: A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://youtu.be/73-1lhvJPNg; https://youtu.be/RfWVYCUBNZ0; https://youtu.be/TeWAmZaKQ_w
CVE: CVE-2022-43973
Published: 2023-01-09
Description: An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request to /apply.cgi to execute arbitrary commands on the underlying Linux operating system as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://youtu.be/73-1lhvJPNg; https://youtu.be/RfWVYCUBNZ0; https://youtu.be/TeWAmZaKQ_w
CVE: CVE-2023-0125
Published: 2023-01-09
Description: A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217717 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.217717; https://vuldb.com/?id.217717; https://www.notion.so/ControlID-XSS-7ab891644a794103b582a59360f071a5
CVE: CVE-2014-125072
Published: 2023-01-09
Description: A vulnerability classified as critical has been found in CherishSin klattr. This affects an unknown part. The manipulation leads to sql injection. The patch is named f8e4ecfbb83aef577011b0b4aebe96fb6ec557f1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217719.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/CherishSin/klattr/commit/f8e4ecfbb83aef577011b0b4aebe96fb6ec557f1; https://vuldb.com/?ctiid.217719; https://vuldb.com/?id.217719
CVE: CVE-2022-3343
Published: 2023-01-09
Description: The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.
CVSS Score: 3.5 (LOW)
References: https://wpscan.com/vulnerability/e507b1b5-1a56-4b2f-b7e7-e22f6da1e32a; https://wpscan.com/vulnerability/e507b1b5-1a56-4b2f-b7e7-e22f6da1e32a
CVE: CVE-2022-3416
Published: 2023-01-09
Description: The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/f927dbe0-3939-4882-a469-1309ac737ee6; https://wpscan.com/vulnerability/f927dbe0-3939-4882-a469-1309ac737ee6
CVE: CVE-2022-3417
Published: 2023-01-09
Description: The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import (intentionally or not) a malicious settings file and a suitable gadget chain is present on the blog.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/55772932-eebd-475b-b5df-e80fab288ee5; https://wpscan.com/vulnerability/55772932-eebd-475b-b5df-e80fab288ee5
CVE: CVE-2022-3679
Published: 2023-01-09
Description: The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/ec4b9bf7-71d6-4528-9dd1-cc[PII_REDACTED]; https://wpscan.com/vulnerability/ec4b9bf7-71d6-4528-9dd1-cc[PII_REDACTED]
CVE: CVE-2022-3855
Published: 2023-01-09
Description: The 404 to Start WordPress plugin through 1.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/ae44f2d8-a452-4310-b616-54d9519867eb; https://wpscan.com/vulnerability/ae44f2d8-a452-4310-b616-54d9519867eb
CVE: CVE-2022-3923
Published: 2023-01-09
Description: The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call it and remove error logs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/6536946a-7ebf-4f8f-9446-36ec2a2a3ad2; https://wpscan.com/vulnerability/6536946a-7ebf-4f8f-9446-36ec2a2a3ad2
CVE: CVE-2022-46603
Published: 2023-01-09
Description: An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/10cks/inkdropPoc; https://github.com/10cks/inkdropPoc
CVE: CVE-2022-4043
Published: 2023-01-09
Description: The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc; https://wpscan.com/vulnerability/ffff8c83-0a59-450a-9b40-c7f3af7205fc
CVE: CVE-2022-4102
Published: 2023-01-09
Description: The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know the related slug.
CVSS Score: 3.1 (LOW)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/c177f763-0bb5-4734-ba2e-7ba816578937; https://wpscan.com/vulnerability/c177f763-0bb5-4734-ba2e-7ba816578937
CVE: CVE-2022-4103
Published: 2023-01-09
Description: The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/5e1244f7-39b5-4f37-8fef-e3f35fc388f1; https://wpscan.com/vulnerability/5e1244f7-39b5-4f37-8fef-e3f35fc388f1
CVE: CVE-2022-4196
Published: 2023-01-09
Description: The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/dfbc61ef-3fe4-4bab-904a-480b073d4e88; https://wpscan.com/vulnerability/dfbc61ef-3fe4-4bab-904a-480b073d4e88
CVE: CVE-2022-4301
Published: 2023-01-09
Description: The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/a8dca528-fb70-44f3-8[PII_REDACTED]9179d; https://wpscan.com/vulnerability/a8dca528-fb70-44f3-8[PII_REDACTED]9179d
CVE: CVE-2022-4310
Published: 2023-01-09
Description: The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/b1aef75d-0c84-4702-83fc-11f0e98a0821; https://wpscan.com/vulnerability/b1aef75d-0c84-4702-83fc-11f0e98a0821
CVE: CVE-2022-4325
Published: 2023-01-09
Description: The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/5b983c48-6b05-47cf-85cb-28bbeec17395; https://wpscan.com/vulnerability/5b983c48-6b05-47cf-85cb-28bbeec17395
CVE: CVE-2022-4368
Published: 2023-01-09
Description: The WP CSV WordPress plugin through 1.8.0.0 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, and doe snot have CSRF checks in place as well, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/fa7e2b64-ca48-4b76-a2c2-f5e31e42eab7; https://wpscan.com/vulnerability/fa7e2b64-ca48-4b76-a2c2-f5e31e42eab7
CVE: CVE-2022-4374
Published: 2023-01-09
Description: The Bg Bible References WordPress plugin through 3.8.14 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/bbaa808d-47b1-4c70-b157-f8297f627a07; https://wpscan.com/vulnerability/bbaa808d-47b1-4c70-b157-f8297f627a07
CVE: CVE-2022-4391
Published: 2023-01-09
Description: The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/c0c37787-3c4c-42d5-bb75-5d4ed3e7aa2b; https://wpscan.com/vulnerability/c0c37787-3c4c-42d5-bb75-5d4ed3e7aa2b
CVE: CVE-2022-4392
Published: 2023-01-09
Description: The iPanorama 360 WordPress Virtual Tour Builder plugin through 1.6.29 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/c298e3dc-09a7-40bb-a361-f49af4bce77e; https://wpscan.com/vulnerability/c298e3dc-09a7-40bb-a361-f49af4bce77e
CVE: CVE-2022-4393
Published: 2023-01-09
Description: The ImageLinks Interactive Image Builder for WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0bd4f370-f9f8-43ee-8f20-96e899a1efb5; https://wpscan.com/vulnerability/0bd4f370-f9f8-43ee-8f20-96e899a1efb5
CVE: CVE-2022-4394
Published: 2023-01-09
Description: The iPages Flipbook For WordPress plugin through 1.4.6 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/8edbdea1-f9bb-407a-bcd1-fff3e146984c; https://wpscan.com/vulnerability/8edbdea1-f9bb-407a-bcd1-fff3e146984c
CVE: CVE-2022-4426
Published: 2023-01-09
Description: The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/7d3d6b9c-d1c1-4e23-b891-7c72e4e89c38; https://wpscan.com/vulnerability/7d3d6b9c-d1c1-4e23-b891-7c72e4e89c38
CVE: CVE-2022-4468
Published: 2023-01-09
Description: The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a3bf24af-417e-4ca2-886c-bb36bb2d952b; https://wpscan.com/vulnerability/a3bf24af-417e-4ca2-886c-bb36bb2d952b
CVE: CVE-2022-4479
Published: 2023-01-09
Description: The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/10f63d30-1b36-459b-80eb-509caaf5d377; https://wpscan.com/vulnerability/10f63d30-1b36-459b-80eb-509caaf5d377
CVE: CVE-2022-4491
Published: 2023-01-09
Description: The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/b62d8fa6-d546-4794-8f7a-c5e4a7f607dc; https://wpscan.com/vulnerability/b62d8fa6-d546-4794-8f7a-c5e4a7f607dc
CVE: CVE-2022-4497
Published: 2023-01-09
Description: The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/3fa6c8b3-6b81-4fe3-b997-25c9e5fdec86; https://wpscan.com/vulnerability/3fa6c8b3-6b81-4fe3-b997-25c9e5fdec86
CVE: CVE-2023-22895
Published: 2023-01-10
Description: The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://crates.io/crates/bzip2/versions; https://github.com/alexcrichton/bzip2-rs/pull/86; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MI5SVRSGKBWB2JGDLDVIFY5ZQVDZP6I7/
CVE: CVE-2023-22898
Published: 2023-01-10
Description: workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/pandora-analysis/pandora/commit/1dc06327fdc07c56eae653e497dd137ec70d8265; https://github.com/pandora-analysis/pandora/commit/1dc06327fdc07c56eae653e497dd137ec70d8265
CVE: CVE-2023-22899
Published: 2023-01-10
Description: Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://breakingthe3ma.app; https://breakingthe3ma.app/files/Threema-PST22.pdf; https://github.com/srikanth-lingala/zip4j/issues/485
CVE: CVE-2023-0012
Published: 2023-01-10
Description: In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-284
References: https://launchpad.support.sap.com/#/notes/3276120; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3276120
CVE: CVE-2023-0013
Published: 2023-01-10
Description: The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3283283; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3283283
CVE: CVE-2023-0014
Published: 2023-01-10
Description: SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates information about system identity in an ambiguous format. This could lead to capture-replay vulnerability and may be exploited by malicious users to obtain illegitimate access to the system.



CVSS Score: 9.0 (CRITICAL)
CWE: CWE-294
References: https://launchpad.support.sap.com/#/notes/3089413; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3089413
CVE: CVE-2023-0015
Published: 2023-01-10
Description: In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3251447; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3251447
CVE: CVE-2023-0016
Published: 2023-01-10
Description: SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection vulnerability and could allow an attacker to access, modify, and/or delete data from the backend database.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://launchpad.support.sap.com/#/notes/3275391; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3275391