vahagn vardanyan vulnerabilities and exploits

(subscribe to this query)

5.3

CVSSv3

The User Management Engine (UME) in SAP NetWeaver 7.4 allows malicious users to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.

Sap Netweaver 7.40

1 EDB exploit1 Github repository

4.9

CVSSv3

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker...

Oracle Business Intelligence Publisher 12.2.1.4.0 Oracle Business Intelligence Publisher 11.1.1.9.0 Oracle Business Intelligence Publisher 12.2.1.3.0

1 EDB exploit

7.2

CVSSv3

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker...

Oracle Business Intelligence Publisher 11.1.1.9.0 Oracle Business Intelligence Publisher 12.2.1.4.0 Oracle Business Intelligence Publisher 12.2.1.3.0

1 EDB exploit

9.8

CVSSv3

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Peoplesoft Enterprise Peopletools 8.54 Oracle Peoplesoft Enterprise Peopletools 8.56

1 EDB exploit1 Github repository

5.3

CVSSv3

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote malicious users to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.

Sap Netweaver Application Server Java

2 EDB exploits1 Github repository1 Article

NA

XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote malicious users to read arbitrary files or possibly have other unspecified impact via a crafted XML request, aka SAP Security Note 2159601.

Sap Mobile Platform 3.0

5.3

CVSSv3

The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 up to and including 7.5 allows remote malicious users to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing ...

Sap Netweaver Application Server Java

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 up to and including 7.5 allows remote malicious users to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testC...

Sap Netweaver Application Server Java

8.6

CVSSv3

XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote malicious users to cause a denial of service (system hang) via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389.

Sap Netweaver 7.4

1 Github repository

NA

An attacker can trigger an XML Entity Expansion or XML External Entity Injection. This causes the entire machine to become unresponsive until the process is terminated manually. An attacker can use this flaw to perform a denial-of-service (DoS) attack. SAP NetWeaver AS JAVA versi...

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook