Browse CVEs

HIGH 7.8 CVE-2022-41175 Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in … 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-41177 Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received … 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.5 CVE-2022-41173 Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 MEDIUM 5.5 CVE-2022-41174 Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file received from untrusted source… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 MEDIUM 5.5 CVE-2022-41176 Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SA… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 HIGH 7.8 CVE-2022-41170 Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sou… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-41172 Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources … 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.5 CVE-2022-41169 Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sou… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 MEDIUM 5.5 CVE-2022-41171 Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sourc… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 HIGH 7.8 CVE-2022-39808 Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted so… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-41167 Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources … 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-41168 Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted s… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.5 CVE-2022-41166 Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sour… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 HIGH 7.8 CVE-2022-39803 Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from un… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-39804 Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrus… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-39805 Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from un… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 HIGH 7.8 CVE-2022-39806 Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from unt… 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.5 CVE-2022-39807 Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (.sldasm, CoreCadTranslator.exe) file received from untru… 3d Visual Enterprise Author Mitigation only Fix from $1,6002022-10-11 HIGH 7.5 CVE-2022-39802EPSS 7% SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The … Manufacturing Execution No fix yet Fix from $1,9502022-10-11 MEDIUM 6.5 CVE-2022-39015 Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted. Business Objects Business Intelligence Platform No fix yet Fix from $1,6002022-10-11 MEDIUM 6.1 CVE-2022-39800 SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper saniti… Businessobjects Business Intelligence Mitigation only Fix from $1,6002022-10-11 CRITICAL 9.8 CVE-2022-35299 SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corr… Sap Iq Mitigation only Fix from $2,3002022-10-11 HIGH 7.6 CVE-2022-39013 Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify … Business Objects Business Intelligence Platform Mitigation only Fix from $1,9502022-10-11 MEDIUM 5.4 CVE-2022-35297 The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to… Enable Now Mitigation only Fix from $1,6002022-10-11 MEDIUM 6.1 CVE-2022-35226 SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to… Data Services Mitigation only Fix from $1,6002022-10-11 MEDIUM 5.2 CVE-2022-32244 Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retrieve (non-personal) system data,… Businessobjects Business Intelligence Mitigation only Fix from $1,6002022-09-13 HIGH 7.5 CVE-2022-39801 SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefi… Access Control Mitigation only Fix from $1,9502022-09-13 MEDIUM 6.1 CVE-2022-39799 An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cro… Netweaver Application Server Abap Mitigation only Fix from $1,6002022-09-13 MEDIUM 5.3 CVE-2022-39014 Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attacker to acc… Businessobjects Business Intelligence Platform Mitigation only Fix from $1,6002022-09-13 HIGH 7.8 CVE-2022-35292 In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnera… Business One Mitigation only Fix from $1,9502022-09-13