CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66764

    🚨 CVE-2026-66764 Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users...

  • CVE-2026-66770

    🚨 CVE-2026-66770 Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL...

  • CVE-2026-66771

    🚨 CVE-2026-66771 SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application...

  • CVE-2026-66772

    🚨 CVE-2026-66772 SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain...

  • CVE-2026-66773

    🚨 CVE-2026-66773 A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the...

  • CVE-2026-66774

    🚨 CVE-2026-66774 SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a...

  • CVE-2026-66775

    🚨 CVE-2026-66775 SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated...

  • CVE-2026-66776

    🚨 CVE-2026-66776 SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific...

  • CVE-2026-66777

    🚨 CVE-2026-66777 SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the...

  • CVE-2026-58239

    🚨 CVE-2026-58239 SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially...

  • CVE-2026-58241

    🚨 CVE-2026-58241 SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged...

  • CVE-2026-58243

    🚨 CVE-2026-58243 SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with...

  • CVE-2026-58244

    🚨 CVE-2026-58244 SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application...

  • CVE-2026-58245

    🚨 CVE-2026-58245 SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the...

  • CVE-2026-58248

    🚨 CVE-2026-58248 SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially...

  • CVE-2026-66760

    🚨 CVE-2026-66760 SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding...

  • CVE-2026-66761

    🚨 CVE-2026-66761 SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high...

  • CVE-2026-66763

    🚨 CVE-2026-66763 SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a...

Статистика статей

Статьи
53,088
Просмотры
263,731
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху