CVEs published February 14, 2018
38 CVEs were published on February 14, 2018: 0 critical, 0 high.
- Published
- 38
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- SAP SE SAP Internet Graphics Server
- 13
- SAP SE SAP HANA Extended Application Services
- 8
- Apache Software Foundation Apache JMeter · org.apache.jmete…
- 1
- Brocade Communications Systems Ruckus Networks Solo APs and…
- 1
- Brocade Communications Systems Ruckus Networks Unleashed AP…
- 1
- IBM Connections
- 1
- IBM Maximo Asset Management
- 1
- SAP SE SAP BI Launchpad
- 1
- SAP SE SAP CRM WebClient UI · SAP SE S4FND
- 1
- SAP SE SAP ERP Financials Information System
- 1
Medium, low and unrated 38
- CVE-2017-18188OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary
- CVE-2017-6229Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.Brocade Communications Systems Ruckus Networks Unleashed AP…
- CVE-2017-6230Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authBrocade Communications Systems Ruckus Networks Solo APs and…
- CVE-2018-7039CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because
- CVE-2017-18187In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk
- CVE-2018-7034TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value,
- CVE-2017-1499IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute IBM Maximo Asset Management
- CVE-2017-1682IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting.IBM Connections
- CVE-2018-7032webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a Mi
- CVE-2018-1287In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host.Apache Software Foundation Apache JMeter · org.apache.jmete…
- CVE-2018-2364SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulSAP SE SAP CRM WebClient UI · SAP SE S4FND
- CVE-2018-2369Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted.SAP SE SAP HANA
- CVE-2018-2370Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, frSAP SE SAP BI Launchpad
- CVE-2018-2371The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which resSAP SE SAP NetWeaver Java Web Application
- CVE-2018-2372A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentialiSAP SE SAP HANA Extended Application Services
- CVE-2018-2373Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statementsSAP SE SAP HANA Extended Application Services
- CVE-2018-2374In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensSAP SE SAP HANA Extended Application Services
- CVE-2018-2375In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve applSAP SE SAP HANA Extended Application Services
- CVE-2018-2376In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve applSAP SE SAP HANA Extended Application Services
- CVE-2018-2377In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized useSAP SE SAP HANA Extended Application Services
- CVE-2018-2378In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource SAP SE SAP HANA Extended Application Services
- CVE-2018-2379In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messagesSAP SE SAP HANA Extended Application Services
- CVE-2018-2381SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, SAP SE SAP ERP Financials Information System
- CVE-2018-2382A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a coSAP SE SAP Internet Graphics Server
- CVE-2018-2383Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.SAP SE SAP Internet Graphics Server
- CVE-2018-2384Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet SAP SE SAP Internet Graphics Server
- CVE-2018-2385Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet GrapSAP SE SAP Internet Graphics Server
- CVE-2018-2386Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP IntSAP SE SAP Internet Graphics Server
- CVE-2018-2387A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on SAP SE SAP Internet Graphics Server
- CVE-2018-2388Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.SAP SE SAP Internet Graphics Server
- CVE-2018-2389Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hidinSAP SE SAP Internet Graphics Server
- CVE-2018-2390Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,
- CVE-2018-2391Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,
- CVE-2018-2392Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriaSAP SE SAP Internet Graphics Server
- CVE-2018-2393Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriaSAP SE SAP Internet Graphics Server
- CVE-2018-2394Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGSSAP SE SAP Internet Graphics Server
- CVE-2018-2395Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, ovSAP SE SAP Internet Graphics Server
- CVE-2018-2396Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,SAP SE SAP Internet Graphics Server