| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-0266 | 5.0 |
Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access,
|
24-08-2020 - 17:37 | 15-02-2019 - 18:29 | |
| CVE-2019-0261 | 7.5 |
Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HAN
|
24-08-2020 - 17:37 | 15-02-2019 - 18:29 | |
| CVE-2019-0255 | 5.5 |
SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the
|
22-02-2019 - 19:58 | 15-02-2019 - 18:29 | |
| CVE-2004-0702 | 5.0 |
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 | |
| CVE-2004-0706 | 2.1 |
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 | |
| CVE-2004-0704 | 5.0 |
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 | |
| CVE-2004-0705 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, al
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 | |
| CVE-2004-0703 | 7.5 |
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 | |
| CVE-2004-0707 | 7.5 |
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 |