NewsThe Hacker News
SAP behebt vier CVSS 10.0-Schwachstellen, darunter zwei mit Ferncodeausführung
Teaser aus der Quelle
SAP hat vier Schwachstellen behoben, die Angreifer ohne Anmeldung ausnutzen könnten, und bewertet alle mit der maximalen CVSS-Punktzahl von 10.0. Drei Schwachstellen betreffen den SAP NetWeaver-Anwendungsserver, auf dem SAP-Systeme laufen, und eine betrifft den Web Dispatcher, der Webanfragen vom Internet entgegennimmt und an den Server weiterleitet. Die Schwachstellen im Web Dispatcher ermöglichen Ferncodeausführung. Es wird empfohlen, die Sicherheitsupdates umgehend zu installieren.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei The Hacker News lesenMehr zu Including
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2026-QP21875Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-JY19705Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-TB63011Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- MittelCVE-2026-127207Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers…
- HochCVE-2026-13764The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is …
- HochCVE-2026-16135The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arb…
- HochCVE-2026-15309The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capabilit…
- Ohne Bewertungosv:CLEANSTART-2026-IM23671Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
Weitere News-Einträge
- Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideNewsBleepingComputer
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassNewsThe Hacker News
- AI found Linux kernel bugs that remained undetected for decadesNewsCSO Online
- Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataNewsThe Hacker News
- GreyNoise AI Cyber Index: Benchmarking AI Models on Defensive CapabilitiesNewsGreyNoise
- Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege EscalationNewsThe Hacker News
- Threat Actors Exploit Openwave, Cisco BroadWorks VulnerabilitiesNewsSecurityWeek
Quelle: https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html
ID