Vulnerabilities > SAP > Trex

DATE CVE VULNERABILITY TITLE RISK
2017-07-25 CVE-2017-11459 Code Injection vulnerability in SAP Trex 7.10
SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.
network
low complexity
sap CWE-94
critical
9.8
2017-04-11 CVE-2017-7691 Code Injection vulnerability in SAP Trex
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA).
network
low complexity
sap CWE-94
critical
9.8
2016-09-27 CVE-2016-6146 Information Exposure vulnerability in SAP Trex 7.10
The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226.
network
low complexity
sap CWE-200
5.3
2016-09-27 CVE-2016-6137 Unspecified vulnerability in SAP Trex 7.10
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591.
network
low complexity
sap
critical
9.8
2016-08-05 CVE-2016-6147 OS Command Injection vulnerability in SAP Trex 7.10
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.
network
low complexity
sap CWE-78
critical
9.8
2016-08-05 CVE-2016-6140 Improper Access Control vulnerability in SAP Trex 7.10
SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.
network
low complexity
sap CWE-284
critical
9.8
2016-08-05 CVE-2016-6139 Unspecified vulnerability in SAP Trex 7.10
SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
network
low complexity
sap
critical
9.8
2016-08-05 CVE-2016-6138 Path Traversal vulnerability in SAP Trex 7.10
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591.
network
low complexity
sap CWE-22
critical
9.8