CWE-914

Total CVEs
3
Vulnerabilities
Avg CVSS v3
8.0
High
Latest CVE
2024
Most Recent

Severity Distribution

Critical 0
0%
High 3
100%
Medium 0
0%
Low 0
0%

External References

All CVEs (3)

Page 1 of 1
CVSS:8.5(High)

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose cred...

CVSS:8.0(High)

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

CVSS:7.5(High)

ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` pr...