SAP® and Oracle® Security Advisories
Onapsis Research Labs is the world’s leading team of security experts who combine their deep knowledge of critical ERP applications and decades of threat research experience to deliver impactful security insights and threat intelligence focused on the business-critical applications from SAP, Oracle, and SaaS providers. Onapsis Research Labs is, far and away, the most prolific and most celebrated contributor of vulnerability research by the SAP Product Security Response Team. No other research team comes close.
10/08/2014
SAP Business Warehouse Missing Authorization Check
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
07/29/2014
Missing authorization check in function modules of BW-SYS-DB-DB4
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
07/29/2014
Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
07/29/2014
SAP HANA UI5 SDK Authentication Bypass
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
07/29/2014
SAP HANA XS missing encryption in form-based authentication
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
06/06/2014
SAP Capacity Leveling Hard-coded Credentials
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
06/06/2014
SAP CCMS Monitoring Hard-coded Credentials
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
06/06/2014
SAP IS-OIL-DS-TSW Traders and Schedulers Workbench Hard-coded Credentials
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits:
06/06/2014
SAP PS-ST and Project-Oriented Procurement Hard-coded credentials
Please fill in the following form in order to download the selected Onapsis’ resource. The system will send you a download link to your email. By registering, you will obtain the following benefits: