{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "SAP heeft kwetsbaarheden verholpen in diverse producten als SAP Business Objects, SAP HANA, Netweaver en Document Builder.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Server Side Request Forgery (SSRF)\n- Cross-Site Scripting (XSS)\n- Omzeilen van authenticatie\n- Omzeilen van beveiligingsmaatregel\n- Manipulatie van gegevens\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "SAP heeft updates uitgebracht om de kwetsbaarheden te verhelpen in de kwetsbare producten. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Unrestricted Upload of File with Dangerous Type", "title": "CWE-434" }, { "category": "general", "text": "Incorrect Type Conversion or Cast", "title": "CWE-704" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "general", "text": "Loop with Unreachable Exit Condition ('Infinite Loop')", "title": "CWE-835" }, { "category": "general", "text": "Missing Authorization", "title": "CWE-862" }, { "category": "general", "text": "XML Injection (aka Blind XPath Injection)", "title": "CWE-91" }, { "category": "general", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - certbundde", "url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2024.html" } ], "title": "Kwetsbaarheden verholpen in SAP producten", "tracking": { "current_release_date": "2024-08-13T13:47:02.764070Z", "id": "NCSC-2024-0333", "initial_release_date": "2024-08-13T13:47:02.764070Z", "revision_history": [ { "date": "2024-08-13T13:47:02.764070Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "sap_bex_web_java_runtime_export_web_service", "product": { "name": "sap_bex_web_java_runtime_export_web_service", "product_id": "CSAFPID-1614277", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_bex_web_java_runtime_export_web_service:bi-base-b_7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_bex_web_java_runtime_export_web_service", "product": { "name": "sap_bex_web_java_runtime_export_web_service", "product_id": "CSAFPID-1614276", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_bex_web_java_runtime_export_web_service:bi-base-e_7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_bex_web_java_runtime_export_web_service", "product": { "name": "sap_bex_web_java_runtime_export_web_service", "product_id": "CSAFPID-1614279", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_bex_web_java_runtime_export_web_service:bi-base-s_7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_bex_web_java_runtime_export_web_service", "product": { "name": "sap_bex_web_java_runtime_export_web_service", "product_id": "CSAFPID-1614278", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_bex_web_java_runtime_export_web_service:bi-ibc_7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_bex_web_java_runtime_export_web_service", "product": { "name": "sap_bex_web_java_runtime_export_web_service", "product_id": "CSAFPID-1614280", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_bex_web_java_runtime_export_web_service:biwebapp_7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_businessobjects_business_intelligence_platform", "product": { "name": "sap_businessobjects_business_intelligence_platform", "product_id": "CSAFPID-1464457", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_businessobjects_business_intelligence_platform", "product": { "name": "sap_businessobjects_business_intelligence_platform", "product_id": "CSAFPID-1464458", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform:440:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_businessobjects_business_intelligence_platform", "product": { "name": "sap_businessobjects_business_intelligence_platform", "product_id": "CSAFPID-1475737", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform:enterprise_420:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_businessobjects_business_intelligence_platform", "product": { "name": "sap_businessobjects_business_intelligence_platform", "product_id": "CSAFPID-1614275", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform:enterprise_430:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_backoffice", "product": { "name": "sap_commerce_backoffice", "product_id": "CSAFPID-1614262", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_backoffice:hy_com_2205:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614269", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:1811:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614270", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:1905:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614271", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:2005:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614273", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:2011:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614272", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:2105:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614274", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:2205:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1548429", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:com_cloud_2211:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce_cloud", "product": { "name": "sap_commerce_cloud", "product_id": "CSAFPID-1614268", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce_cloud:hy_com_1808:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce", "product": { "name": "sap_commerce", "product_id": "CSAFPID-1495976", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce:com_cloud_2211:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_commerce", "product": { "name": "sap_commerce", "product_id": "CSAFPID-1495975", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_commerce:hy_com_2205:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614238", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:701:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614239", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614240", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:712:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614241", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:713:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614242", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:714:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_crm_abap__insights_management_", "product": { "name": "sap_crm_abap__insights_management_", "product_id": "CSAFPID-1614237", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_crm_abap__insights_management_:bbpcrm_700:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1475725", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_102:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614203", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_103:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614204", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_104:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614205", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_105:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614206", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_106:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614207", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_107:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614208", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:s4fnd_108:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1475732", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:sap_bs_fnd_702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614209", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:sap_bs_fnd_731:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614210", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:sap_bs_fnd_746:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614211", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:sap_bs_fnd_747:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_document_builder", "product": { "name": "sap_document_builder", "product_id": "CSAFPID-1614212", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_document_builder:sap_bs_fnd_748:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614255", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614256", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614260", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.54:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614257", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.77:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614258", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.85:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614259", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.89:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614261", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:kernel_7.93:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614243", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:krnl64nuc_7.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614244", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:krnl64nuc_7.22ext:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614245", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:krnl64uc_7.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614246", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:krnl64uc_7.22ext:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614247", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:krnl64uc_7.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614251", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.22_ext:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614248", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.53:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614253", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.54:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614249", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.77:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614250", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.85:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614252", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.89:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product": { "name": "sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server", "product_id": "CSAFPID-1614254", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server__abap_and_java__sap_web_dispatcher_and_sap_content_server:webdisp_7.93:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465636", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_700:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1614223", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_701:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1614224", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465639", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_731:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465640", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_740:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465641", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_750:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465642", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_751:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465643", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_752:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465644", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_753:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465645", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_754:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465646", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_755:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465647", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_756:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1465648", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_757:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1614225", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_758:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap_and_abap_platform", "product": { "name": "sap_netweaver_application_server_abap_and_abap_platform", "product_id": "CSAFPID-1614226", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap_and_abap_platform:sap_basis_912:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1559117", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:755:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1559118", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:756:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614230", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:757:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614231", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:758:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614232", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_basis_700:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614233", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_basis_701:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614234", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_basis_702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614235", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_basis_731:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614236", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_basis_912:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_netweaver_application_server_abap", "product": { "name": "sap_netweaver_application_server_abap", "product_id": "CSAFPID-1614229", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_netweaver_application_server_abap:sap_ui_754:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_permit_to_work", "product": { "name": "sap_permit_to_work", "product_id": "CSAFPID-1614228", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_permit_to_work:900:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_permit_to_work", "product": { "name": "sap_permit_to_work", "product_id": "CSAFPID-1614227", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_permit_to_work:uis4hop1_800:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_shared_service_framework", "product": { "name": "sap_shared_service_framework", "product_id": "CSAFPID-1614264", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_shared_service_framework:731:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_shared_service_framework", "product": { "name": "sap_shared_service_framework", "product_id": "CSAFPID-1614265", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_shared_service_framework:746:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_shared_service_framework", "product": { "name": "sap_shared_service_framework", "product_id": "CSAFPID-1614266", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_shared_service_framework:747:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_shared_service_framework", "product": { "name": "sap_shared_service_framework", "product_id": "CSAFPID-1614267", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_shared_service_framework:748:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_shared_service_framework", "product": { "name": "sap_shared_service_framework", "product_id": "CSAFPID-1614263", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_shared_service_framework:sap_bs_fnd_702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614213", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:617:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614214", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:618:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614215", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:802:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614216", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:803:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614217", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:804:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614218", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:805:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614219", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:806:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614220", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:807:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap_student_life_cycle_management__slcm_", "product": { "name": "sap_student_life_cycle_management__slcm_", "product_id": "CSAFPID-1614221", "product_identification_helper": { "cpe": "cpe:2.3:a:sap_se:sap_student_life_cycle_management__slcm_:808:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "sap_se" }, { "branches": [ { "category": "product_name", "name": "businessobjects_business_intelligence_platform", "product": { "name": "businessobjects_business_intelligence_platform", "product_id": "CSAFPID-55201", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "businessobjects_business_intelligence_platform", "product": { "name": "businessobjects_business_intelligence_platform", "product_id": "CSAFPID-55202", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "businessobjects_business_intelligence_platform", "product": { "name": "businessobjects_business_intelligence_platform", "product_id": "CSAFPID-955724", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:440:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "commerce_backoffice", "product": { "name": "commerce_backoffice", "product_id": "CSAFPID-1614815", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:commerce_backoffice:2205:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1611687", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_102:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614517", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_103:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614513", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_104:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614515", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_105:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614521", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_106:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614522", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_107:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614520", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:s4fnd_108:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1611685", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:sap_bs_fnd_702:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614518", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:sap_bs_fnd_731:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614519", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:sap_bs_fnd_746:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614516", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:sap_bs_fnd_747:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "document_builder", "product": { "name": "document_builder", "product_id": "CSAFPID-1614514", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:document_builder:sap_bs_fnd_748:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sap", "product": { "name": "sap", "product_id": "CSAFPID-1498297", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:sap:-:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1614510", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:617:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475930", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:618:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475932", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:802:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475933", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:803:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475927", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:804:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475931", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:805:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475928", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:806:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475934", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:807:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "student_life_cycle_management", "product": { "name": "student_life_cycle_management", "product_id": "CSAFPID-1475929", "product_identification_helper": { "cpe": "cpe:2.3:a:sap:student_life_cycle_management:808:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "sap" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-0778", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "notes": [ { "category": "other", "text": "Loop with Unreachable Exit Condition ('Infinite Loop')", "title": "CWE-835" } ], "references": [ { "category": "self", "summary": "CVE-2022-0778", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-0778.json" } ], "title": "CVE-2022-0778" }, { "cve": "CVE-2023-0215", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "references": [ { "category": "self", "summary": "CVE-2023-0215", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0215.json" } ], "title": "CVE-2023-0215" }, { "cve": "CVE-2023-0286", "cwe": { "id": "CWE-704", "name": "Incorrect Type Conversion or Cast" }, "notes": [ { "category": "other", "text": "Incorrect Type Conversion or Cast", "title": "CWE-704" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "references": [ { "category": "self", "summary": "CVE-2023-0286", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0286.json" } ], "title": "CVE-2023-0286" }, { "cve": "CVE-2023-30533", "references": [ { "category": "self", "summary": "CVE-2023-30533", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30533.json" } ], "title": "CVE-2023-30533" }, { "cve": "CVE-2024-28166", "cwe": { "id": "CWE-434", "name": "Unrestricted Upload of File with Dangerous Type" }, "notes": [ { "category": "other", "text": "Unrestricted Upload of File with Dangerous Type", "title": "CWE-434" } ], "product_status": { "known_affected": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-28166", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28166.json" } ], "scores": [ { "cvss_v3": { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] } ], "title": "CVE-2024-28166" }, { "cve": "CVE-2024-29415", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "references": [ { "category": "self", "summary": "CVE-2024-29415", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29415.json" } ], "title": "CVE-2024-29415" }, { "cve": "CVE-2024-33003", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1614268", "CSAFPID-1614269", "CSAFPID-1614270", "CSAFPID-1614271", "CSAFPID-1614272", "CSAFPID-1614273", "CSAFPID-1614274", "CSAFPID-1548429", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33003", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33003.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1614268", "CSAFPID-1614269", "CSAFPID-1614270", "CSAFPID-1614271", "CSAFPID-1614272", "CSAFPID-1614273", "CSAFPID-1614274", "CSAFPID-1548429", "CSAFPID-1498297" ] } ], "title": "CVE-2024-33003" }, { "cve": "CVE-2024-33005", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1614243", "CSAFPID-1614244", "CSAFPID-1614245", "CSAFPID-1614246", "CSAFPID-1614247", "CSAFPID-1614248", "CSAFPID-1614249", "CSAFPID-1614250", "CSAFPID-1614251", "CSAFPID-1614252", "CSAFPID-1614253", "CSAFPID-1614254", "CSAFPID-1614255", "CSAFPID-1614256", "CSAFPID-1614257", "CSAFPID-1614258", "CSAFPID-1614259", "CSAFPID-1614260", "CSAFPID-1614261", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33005", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33005.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H", "baseScore": 6.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614243", "CSAFPID-1614244", "CSAFPID-1614245", "CSAFPID-1614246", "CSAFPID-1614247", "CSAFPID-1614248", "CSAFPID-1614249", "CSAFPID-1614250", "CSAFPID-1614251", "CSAFPID-1614252", "CSAFPID-1614253", "CSAFPID-1614254", "CSAFPID-1614255", "CSAFPID-1614256", "CSAFPID-1614257", "CSAFPID-1614258", "CSAFPID-1614259", "CSAFPID-1614260", "CSAFPID-1614261", "CSAFPID-1498297" ] } ], "title": "CVE-2024-33005" }, { "cve": "CVE-2024-39591", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1475725", "CSAFPID-1614203", "CSAFPID-1614204", "CSAFPID-1614205", "CSAFPID-1614206", "CSAFPID-1614207", "CSAFPID-1614208", "CSAFPID-1475732", "CSAFPID-1614209", "CSAFPID-1614210", "CSAFPID-1614211", "CSAFPID-1614212", "CSAFPID-1611687", "CSAFPID-1611685", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-39591", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39591.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1475725", "CSAFPID-1614203", "CSAFPID-1614204", "CSAFPID-1614205", "CSAFPID-1614206", "CSAFPID-1614207", "CSAFPID-1614208", "CSAFPID-1475732", "CSAFPID-1614209", "CSAFPID-1614210", "CSAFPID-1614211", "CSAFPID-1614212", "CSAFPID-1611687", "CSAFPID-1611685", "CSAFPID-1498297" ] } ], "title": "CVE-2024-39591" }, { "cve": "CVE-2024-41730", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1614275", "CSAFPID-1464458", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41730", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41730.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1614275", "CSAFPID-1464458", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41730" }, { "cve": "CVE-2024-41731", "cwe": { "id": "CWE-434", "name": "Unrestricted Upload of File with Dangerous Type" }, "notes": [ { "category": "other", "text": "Unrestricted Upload of File with Dangerous Type", "title": "CWE-434" } ], "product_status": { "known_affected": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41731", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41731.json" } ], "scores": [ { "cvss_v3": { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41731" }, { "cve": "CVE-2024-41732", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" } ], "product_status": { "known_affected": [ "CSAFPID-1614229", "CSAFPID-1559117", "CSAFPID-1559118", "CSAFPID-1614230", "CSAFPID-1614231", "CSAFPID-1614232", "CSAFPID-1614233", "CSAFPID-1614234", "CSAFPID-1614235", "CSAFPID-1614236", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41732", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41732.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614229", "CSAFPID-1559117", "CSAFPID-1559118", "CSAFPID-1614230", "CSAFPID-1614231", "CSAFPID-1614232", "CSAFPID-1614233", "CSAFPID-1614234", "CSAFPID-1614235", "CSAFPID-1614236", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41732" }, { "cve": "CVE-2024-41733", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1495975", "CSAFPID-1495976", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41733", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41733.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1495975", "CSAFPID-1495976", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41733" }, { "cve": "CVE-2024-41734", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1465636", "CSAFPID-1614223", "CSAFPID-1614224", "CSAFPID-1465639", "CSAFPID-1465640", "CSAFPID-1465641", "CSAFPID-1465642", "CSAFPID-1465643", "CSAFPID-1465644", "CSAFPID-1465645", "CSAFPID-1465646", "CSAFPID-1465647", "CSAFPID-1465648", "CSAFPID-1614225", "CSAFPID-1614226", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41734", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41734.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1465636", "CSAFPID-1614223", "CSAFPID-1614224", "CSAFPID-1465639", "CSAFPID-1465640", "CSAFPID-1465641", "CSAFPID-1465642", "CSAFPID-1465643", "CSAFPID-1465644", "CSAFPID-1465645", "CSAFPID-1465646", "CSAFPID-1465647", "CSAFPID-1465648", "CSAFPID-1614225", "CSAFPID-1614226", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41734" }, { "cve": "CVE-2024-41735", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1614262", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41735", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41735.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614262", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41735" }, { "cve": "CVE-2024-41736", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "other", "text": "Exposure of Sensitive Information to an Unauthorized Actor", "title": "CWE-200" } ], "product_status": { "known_affected": [ "CSAFPID-1614227", "CSAFPID-1614228", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41736", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41736.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614227", "CSAFPID-1614228", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41736" }, { "cve": "CVE-2024-41737", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "other", "text": "Server-Side Request Forgery (SSRF)", "title": "CWE-918" } ], "product_status": { "known_affected": [ "CSAFPID-1614237", "CSAFPID-1614238", "CSAFPID-1614239", "CSAFPID-1614240", "CSAFPID-1614241", "CSAFPID-1614242", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41737", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41737.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "baseScore": 5.0, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614237", "CSAFPID-1614238", "CSAFPID-1614239", "CSAFPID-1614240", "CSAFPID-1614241", "CSAFPID-1614242", "CSAFPID-1498297" ] } ], "title": "CVE-2024-41737" }, { "cve": "CVE-2024-42373", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1614213", "CSAFPID-1614214", "CSAFPID-1614215", "CSAFPID-1614216", "CSAFPID-1614217", "CSAFPID-1614218", "CSAFPID-1614219", "CSAFPID-1614220", "CSAFPID-1614221", "CSAFPID-1475927", "CSAFPID-1475928", "CSAFPID-1475929", "CSAFPID-1475930", "CSAFPID-1475931", "CSAFPID-1475932", "CSAFPID-1475933", "CSAFPID-1475934", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42373", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42373.json" } ], "title": "CVE-2024-42373" }, { "cve": "CVE-2024-42374", "cwe": { "id": "CWE-91", "name": "XML Injection (aka Blind XPath Injection)" }, "notes": [ { "category": "other", "text": "XML Injection (aka Blind XPath Injection)", "title": "CWE-91" } ], "product_status": { "known_affected": [ "CSAFPID-1614276", "CSAFPID-1614277", "CSAFPID-1614278", "CSAFPID-1614279", "CSAFPID-1614280", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42374", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42374.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1614276", "CSAFPID-1614277", "CSAFPID-1614278", "CSAFPID-1614279", "CSAFPID-1614280", "CSAFPID-1498297" ] } ], "title": "CVE-2024-42374" }, { "cve": "CVE-2024-42375", "cwe": { "id": "CWE-434", "name": "Unrestricted Upload of File with Dangerous Type" }, "notes": [ { "category": "other", "text": "Unrestricted Upload of File with Dangerous Type", "title": "CWE-434" } ], "product_status": { "known_affected": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42375", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42375.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1475737", "CSAFPID-1464457", "CSAFPID-1464458", "CSAFPID-55201", "CSAFPID-55202", "CSAFPID-955724", "CSAFPID-1498297" ] } ], "title": "CVE-2024-42375" }, { "cve": "CVE-2024-42376", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "notes": [ { "category": "other", "text": "Missing Authorization", "title": "CWE-862" } ], "product_status": { "known_affected": [ "CSAFPID-1614263", "CSAFPID-1614264", "CSAFPID-1614265", "CSAFPID-1614266", "CSAFPID-1614267", "CSAFPID-1498297" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42376", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42376.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1614263", "CSAFPID-1614264", "CSAFPID-1614265", "CSAFPID-1614266", "CSAFPID-1614267", "CSAFPID-1498297" ] } ], "title": "CVE-2024-42376" } ] }