CVE-2025-0059
published 2025-01-14CVE-2025-0059: Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usability. An attacker…
PriorityP425medium6CVSS 3.1
AVLACLPRHUINSCCHINAN
EPSS
0.18%
8.0th percentile
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
| sap_se | sap_netweaver_application_server_abap | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2024-50208 kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
bugzilla·2024-11-08·CVSS 5.5
CVE-2024-50208 [MEDIUM] CVE-2024-50208 kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
CVE-2024-50208 kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
Avoid memory corruption while setting up Level-2 PBL pages for the non MR
resources when num_pages > 256K.
There will be a single PDE page address (contiguous pages in the case of >
PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid
memory access after 256K PBL entries in the PDE.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024110806-CVE-2024-50208-08dc@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:0059 https://access.redhat.com/errata/RHSA-2025:0059
Bugzilla
CVE-2024-46713 kernel: perf/aux: Fix AUX buffer serialization
bugzilla·2024-09-13·CVSS 7.8
CVE-2024-46713 [HIGH] CVE-2024-46713 kernel: perf/aux: Fix AUX buffer serialization
CVE-2024-46713 kernel: perf/aux: Fix AUX buffer serialization
In the Linux kernel, the following vulnerability has been resolved:
perf/aux: Fix AUX buffer serialization
Ole reported that event->mmap_mutex is strictly insufficient to
serialize the AUX buffer, add a per RB mutex to fully serialize it.
Note that in the lock order comment the perf_event::mmap_mutex order
was already wrong, that is, it nesting under mmap_lock is not new with
this patch.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024091316-CVE-2024-46713-5e49@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:0059 https://access.redhat.com/errata/RHSA-2025:0059
2025-01-14
Published