Search
Find a vulnerability
Search criteria
4 vulnerabilities found for point_of_sale_xpress_server by sap
CVE-2017-15295 (GCVE-0-2017-15295)
Vulnerability from nvd – Published: 2017-10-16 16:00 – Updated: 2024-08-05 19:50
VLAI
EPSS
VEX
Summary
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://erpscan.io/research/hacking-sap-pos/ | x_refsource_MISC |
| https://blogs.sap.com/2017/09/12/sap-security-pat… | x_refsource_MISC |
| https://erpscan.io/advisories/erpscan-17-033-sap-… | x_refsource_MISC |
Date Public
2017-07-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:50:16.447Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-07-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-10T17:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15295",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://erpscan.io/research/hacking-sap-pos/",
"refsource": "MISC",
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"name": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
"refsource": "MISC",
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"name": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/",
"refsource": "MISC",
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15295",
"datePublished": "2017-10-16T16:00:00.000Z",
"dateReserved": "2017-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:50:16.447Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15293 (GCVE-0-2017-15293)
Vulnerability from nvd – Published: 2017-10-16 16:00 – Updated: 2024-08-05 19:50
VLAI
EPSS
VEX
Summary
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://erpscan.io/advisories/erpscan-17-032-sap-… | x_refsource_MISC |
| http://www.securityfocus.com/bid/100713 | vdb-entryx_refsource_BID |
| https://erpscan.io/research/hacking-sap-pos/ | x_refsource_MISC |
| https://blogs.sap.com/2017/09/12/sap-security-pat… | x_refsource_MISC |
Date Public
2017-07-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:50:16.485Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/100713"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-07-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-10T17:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/100713"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15293",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/",
"refsource": "MISC",
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/100713"
},
{
"name": "https://erpscan.io/research/hacking-sap-pos/",
"refsource": "MISC",
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"name": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
"refsource": "MISC",
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15293",
"datePublished": "2017-10-16T16:00:00.000Z",
"dateReserved": "2017-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:50:16.485Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15293 (GCVE-0-2017-15293)
Vulnerability from cvelistv5 – Published: 2017-10-16 16:00 – Updated: 2024-08-05 19:50
VLAI
EPSS
VEX
Summary
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://erpscan.io/advisories/erpscan-17-032-sap-… | x_refsource_MISC |
| http://www.securityfocus.com/bid/100713 | vdb-entryx_refsource_BID |
| https://erpscan.io/research/hacking-sap-pos/ | x_refsource_MISC |
| https://blogs.sap.com/2017/09/12/sap-security-pat… | x_refsource_MISC |
Date Public
2017-07-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:50:16.485Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/100713"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-07-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-10T17:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/100713"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15293",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/",
"refsource": "MISC",
"url": "https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/"
},
{
"name": "100713",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/100713"
},
{
"name": "https://erpscan.io/research/hacking-sap-pos/",
"refsource": "MISC",
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"name": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
"refsource": "MISC",
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15293",
"datePublished": "2017-10-16T16:00:00.000Z",
"dateReserved": "2017-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:50:16.485Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-15295 (GCVE-0-2017-15295)
Vulnerability from cvelistv5 – Published: 2017-10-16 16:00 – Updated: 2024-08-05 19:50
VLAI
EPSS
VEX
Summary
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://erpscan.io/research/hacking-sap-pos/ | x_refsource_MISC |
| https://blogs.sap.com/2017/09/12/sap-security-pat… | x_refsource_MISC |
| https://erpscan.io/advisories/erpscan-17-033-sap-… | x_refsource_MISC |
Date Public
2017-07-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T19:50:16.447Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-07-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-12-10T17:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-15295",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://erpscan.io/research/hacking-sap-pos/",
"refsource": "MISC",
"url": "https://erpscan.io/research/hacking-sap-pos/"
},
{
"name": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/",
"refsource": "MISC",
"url": "https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/"
},
{
"name": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/",
"refsource": "MISC",
"url": "https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-15295",
"datePublished": "2017-10-16T16:00:00.000Z",
"dateReserved": "2017-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T19:50:16.447Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}