Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap sap db 7.4.03.30 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2007-3614
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 up to and including 7.5, allow remote malicious users to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryS...
Sap Sap Db 7.4.03.30Sap Sap Db 7.4.3Sap Sap Db 7.4Sap Sap Db 7.4.03.29Sap Sap Db 7.4.3.7 BetaSap Sap Db 7.5Sap Sap Db 7.3.00Sap Sap Db 7.3.29
7.5
CVSSv2
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB prior to 7.4.03.30 generates predictable session IDs, which allows remote malicious users to conduct unauthorized activities.
Sap Sap Db
7.5
CVSSv2
CVE-2003-0941
web-tools in SAP DB prior to 7.4.03.30 allows remote malicious users to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.
Sap Sap Db
5
CVSSv2
CVE-2003-0940
Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB prior to 7.4.03.30 allows remote malicious users to read arbitrary files via .. (dot dot) sequences in a URL.
Sap Sap Db
7.5
CVSSv2
CVE-2003-0942
Buffer overflow in Web Agent Administration service in web-tools for SAP DB prior to 7.4.03.30 allows remote malicious users to execute arbitrary code via a long Name parameter to waadmin.wa.
Sap Sap Db
7.5
CVSSv2
CVE-2003-0944
Buffer overflow in the WAECHO default service in web-tools in SAP DB prior to 7.4.03.30 allows remote malicious users to execute arbitrary code via a URL with a long requestURI.
Sap Sap Db
7.5
CVSSv2
CVE-2003-0943
web-tools in SAP DB prior to 7.4.03.30 installs several services that are enabled by default, which could allow remote malicious users to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3)...
Sap Sap Db
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook