CVE-2014-8312

概要

参考情報

• packetstormsecurity.com/files/128603/SAP-Business-Warehouse-Missing-Authorization-Check.html
• scn.sap.com/docs/DOC-8218 · Vendor Advisory
• seclists.org/fulldisclosure/2014/Oct/38
• secunia.com/advisories/61101
• onapsis.com/resources/get.php
• securityfocus.com/archive/1/533645/100/0/threaded
• securityfocus.com/bid/70292
• exchange.xforce.ibmcloud.com/vulnerabilities/96877
• service.sap.com/sap/support/notes/1967780 · Vendor Advisory

netweaver abap のその他の脆弱性

• CVE-2024-33005中 6.3Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP …
• CVE-2022-29614中 5.0SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22…
• CVE-2022-29612中 4.3SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22…
• CVE-2022-28215中 4.7SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious si…
• CVE-2022-22545中 4.9A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetW…