Tag: SAP_BASIS

Reverse Tabnabbing vulnerability within SAP Business Server Pages Applications in SAP NetWeaver AS ABAP, SAP security note 2972275

RedRays Team March 9, 2021

CVE-2021-21478 Reverse Tabnabbing vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), SAP security note 2974582

RedRays Team February 9, 2021

CVE-2017-16691 SNOTE Digital signature verification along with note file extraction, SAP security note 2546220

RedRays Team December 12, 2017

SQL injection vulnerability in SAP NetWeaver, SAP security note 2051717

RedRays Team September 15, 2017

Cross-Site Scripting (XSS) vulnerability in Web Dynpro ABAP, SAP security note 2488516

RedRays Team September 12, 2017

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Generic Object Services, SAP security note 2424671

RedRays Team May 9, 2017

SQL Injection vulnerability in Database Monitors for Oracle, SAP security note 2319506

RedRays Team March 14, 2017

Cross-Site Scripting (XSS) vulnerability in PI Integration Engine, SAP security note 2366726

RedRays Team November 8, 2016

Untrusted XML input parsing possible in the runtime of SAP NetWeaver Business Client, SAP security note 2183189

RedRays Team September 8, 2015

Update 1 to Security Note 1997734, SAP security note 2205421

RedRays Team August 17, 2015

Hardcoded credentials in BC-CUS-TOL-CST, SAP security note 2059659

RedRays Team June 9, 2015

Missing authorization check in RFC destination maintenance, SAP security note 2084143

RedRays Team June 9, 2015