Tag: NetWeaver

CVE-2019-0337Cross-Site Scripting (XSS) vulnerability in Java Proxy Runtime of SAP NetWeaver Process Integration, SAP security note 2789866

RedRays Team January 26, 2021

Detailed error messages with stack trace in Web Dynpro, SAP security note 962319

RedRays Team April 23, 2019

CVE-2019-0275 Cross-Site Scripting (XSS) Vulnerability in SAP NW SAML 1.1 SSO Demo App, SAP security note 2689925

RedRays Team March 12, 2019

SAP Netweaver SAL incorrect logging of addresses, SAP security note 2190621

RedRays Team April 12, 2018

CVE-2017-16678 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, SAP security note 2457562

RedRays Team December 12, 2017

Missing XML Validation vulnerability in SAP NetWeaver Java Workflow (JWF), SAP security note 2492658

RedRays Team October 23, 2017

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Central Technical Configuration, SAP security note 2406783

RedRays Team April 11, 2017

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Java Archiving Framework, SAP security note 2308535

RedRays Team April 11, 2017

Cross-Site Scripting (XSS) vulnerability in SAP Netweaver Monitoring application, SAP security note 2417046

RedRays Team March 14, 2017

Whitelist based Clickjacking Framing Protection in CRM-ISA, SAP security note 2297227

RedRays Team July 12, 2016

Potential information disclosure relating to the Portal, SAP security note 1852146

RedRays Team December 9, 2013

Potential disclosure of information about PI, SAP security note 1778949

RedRays Team March 12, 2013