Sap Trex
8 CVEs affecting Sap Trex. Latest disclosed: 2017-07-25. Critical: 7, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11459 | Critical | 9.8 | 2017-07-25 | SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code v… |
CVE-2017-7691 | Critical | 9.8 | 2017-04-11 | A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. |
CVE-2016-6137 | Critical | 9.8 | 2016-09-27 | An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 220359… |
CVE-2016-6147 | Critical | 9.8 | 2016-08-05 | An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors… |
CVE-2016-6140 | Critical | 9.8 | 2016-08-05 | SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591. |
CVE-2016-6139 | Critical | 9.8 | 2016-08-05 | SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591. |
CVE-2016-6138 | Critical | 9.8 | 2016-08-05 | Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2… |
CVE-2016-6146 | Medium | 5.3 | 2016-09-27 | The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226. |