SAP® and Oracle® Security Advisories
Onapsis Research Labs is the world’s leading team of security experts who combine their deep knowledge of critical ERP applications and decades of threat research experience to deliver impactful security insights and threat intelligence focused on the business-critical applications from SAP, Oracle, and SaaS providers. Onapsis Research Labs is, far and away, the most prolific and most celebrated contributor of vulnerability research by the SAP Product Security Response Team. No other research team comes close.
01/26/2022
SAP Enterprise Portal – SSRF iviewCatcherEditor
IMPACT ON BUSINESS Successful attacks can lead to various types of exploitation like CSRF, html injection, data exfiltration, depending on the victim’s privileges. AFFECTED COMPONENTS DESCRIPTION SAP Enterprise Portal is a web frontend component for SAP Netweaver. Affected components: EP-RUNTIME 7.10 EP-RUNTIME 7.11 EP-RUNTIME 7.20 EP-RUNTIME 7.30 EP-RUNTIME 7.31 EP-RUNTIME 7.40 EP-RUNTIME 7.50 (Check SAP…
01/26/2022
SAP Enterprise Portal – XSLT injection
IMPACT ON BUSINESS This XSLT vulnerability allows an unprivileged authenticated attacker to execute an OS command as SAP administrator OS-level (sidadm). This results in a full compromise of the confidentiality, integrity and availability of the system. AFFECTED COMPONENTS DESCRIPTION SAP Enterprise Portal is a web frontend component for SAP Netweaver. Affected components: ENGINEAPI 7.10 ENGINEAPI…
01/26/2022
SAP Enterprise Portal – XSS NavigationReporter
IMPACT ON BUSINESS Impact depends on the victim’s privileges. In the worst case, a successful attack allows an attacker to hijack an administrator session and perform actions like exfiltrate data, change data or shutdown the Portal. AFFECTED COMPONENTS DESCRIPTION SAP Enterprise Portal is a web frontend component for SAP Netweaver. Affected components: EP-RUNTIME 7.30 EP-RUNTIME…
01/26/2022
SAP Enterprise Portal – XSS RunContentCreation
IMPACT ON BUSINESS Impact depends on the victim’s privileges. In the worst case, a successful attack allows an attacker to hijack an administrator session and perform actions like exfiltrate data, change data or shutdown the Portal. AFFECTED COMPONENTS DESCRIPTION SAP Enterprise Portal is a web frontend component for SAP Netweaver. Affected components: EP-RUNTIME 7.10 EP-RUNTIME…
12/15/2021
Guidance for CVE-2021-44228 (Log4Shell) and SAP Applications
Note: Please bear in mind that all the information provided here is subject to change due to how quickly new attacks and evasions for the proposed mitigations are found. Information on this page last updated 10 AM EST on 27 December 2021 UPDATES 12/27/2021: UPDATES 12/17/2021: Introduction On December 9th, a critical vulnerability (CVE-2021-44228) was…
11/21/2021
Exposed Sensitive Information within SAP Enterprise Portal
Impact On Business One HTTP endpoint of the portal exposes sensitive information that could be used by an attacker with administrator privileges, in conjunction with other attacks (e.g. XSS). Affected Components Description SAP Enterprise Portal is a web frontend component for SAP Netweaver. Affected components: EP-RUNTIME 7.10 EP-RUNTIME 7.11 EP-RUNTIME 7.20 EP-RUNTIME 7.30 EP-RUNTIME 7.31…
11/21/2021
Memory Corruption Vulnerability in SAP NetWeaver
Impact On Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system causing the system to crash and rendering it unavailable. Affected Components Description The SAP dispatcher service is part of SAP Kernel. Mandatory, it manages, gathers…
11/21/2021
Memory Corruption Vulnerability in SAP NetWeaver ABAP IGS Service
Impact On Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system causing the system to crash and rendering it unavailable. Affected Components Description The SAP IGS is a widely-used, server-based engine for generating graphical and non-graphical…
11/21/2021
Memory Corruption Vulnerability in SAP NetWeaver Gateway Service
Impact On Business An unauthenticated attacker without specific knowledge of the system can send a specially crafted packet over a network which will trigger an internal error in the system causing the system to crash and rendering it unavailable. Affected Components Description The SAP Gateway server is the component that manages the communication between the…