Host Agent CVE-2020-6186

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values fo

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database -

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for th

An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start S

SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. Rated high severity (CVSS 7.5), this v

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assign

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privi

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access.

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be abl