CVE-2017-15297

Mô tả

Tham khảo

• securityfocus.com/bid/99528 · Third Party Advisory
• blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017 · Issue Tracking
• erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos

Lỗ hổng khác của host agent

• CVE-2024-47595CAO 7.1An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful explo…
• CVE-2023-40309NGHIÊM TRỌNG 9.8SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authe…
• CVE-2023-40308CAO 7.5SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption e…
• CVE-2023-36926TRUNG BÌNH 5.3Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumented parameter to a par…
• CVE-2023-27498CAO 7.2SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start …