Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities found for ace-advanced_business_application_programming by pwc
CVE-2016-9832 (GCVE-0-2016-9832)
Vulnerability from nvd – Published: 2016-12-09 11:00 – Updated: 2024-08-06 02:59
VLAI
Summary
PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/539883/30/… | x_refsource_MISC |
| http://www.securityfocus.com/bid/94733 | vdb-entryx_refsource_BID |
| http://packetstormsecurity.com/files/140062/PwC-A… | x_refsource_MISC |
| http://seclists.org/fulldisclosure/2016/Dec/33 | mailing-listx_refsource_FULLDISC |
| https://www.esnc.de/security-advisories/vulnerabi… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/539883/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2016-12-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:59:03.546Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94733"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94733"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9832",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.securityfocus.com/archive/1/539883/30/0/threaded",
"refsource": "MISC",
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94733"
},
{
"name": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"name": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security",
"refsource": "MISC",
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-9832",
"datePublished": "2016-12-09T11:00:00.000Z",
"dateReserved": "2016-12-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T02:59:03.546Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2016-9832 (GCVE-0-2016-9832)
Vulnerability from cvelistv5 – Published: 2016-12-09 11:00 – Updated: 2024-08-06 02:59
VLAI
Summary
PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/539883/30/… | x_refsource_MISC |
| http://www.securityfocus.com/bid/94733 | vdb-entryx_refsource_BID |
| http://packetstormsecurity.com/files/140062/PwC-A… | x_refsource_MISC |
| http://seclists.org/fulldisclosure/2016/Dec/33 | mailing-listx_refsource_FULLDISC |
| https://www.esnc.de/security-advisories/vulnerabi… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/539883/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2016-12-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:59:03.546Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94733"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94733"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-9832",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.securityfocus.com/archive/1/539883/30/0/threaded",
"refsource": "MISC",
"url": "http://www.securityfocus.com/archive/1/539883/30/0/threaded"
},
{
"name": "94733",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94733"
},
{
"name": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html"
},
{
"name": "20161209 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2016/Dec/33"
},
{
"name": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security",
"refsource": "MISC",
"url": "https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security"
},
{
"name": "20161207 [ESNC-2041217] Critical Security Vulnerability in PwC ACE Software for SAP Security",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/539883/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-9832",
"datePublished": "2016-12-09T11:00:00.000Z",
"dateReserved": "2016-12-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T02:59:03.546Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}