Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing. It is possible to spoof XML signatures and send arbitrary requests to the server via PI Axis adapter. These requests will be accepted by the PI Axis adapter even if the payload has been altered, especially when the signed element is the body of the xml document.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Netweaver Process Integration 访问控制错误漏洞
Vulnerability Description
SAP Netweaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。Process Integration是其中的一套企业应用程序集成软件。 SAP Netweaver Process Integration中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下版本受到影响：SAP NetWeaver Process Integration 7.10版本，7.11版本，7.30版本，7.31版本，7.40版本，
CVSS Information
N/A
Vulnerability Type
N/A