Point Of Sale Xpress Server (Sap) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2017-10-16. Vendor: Sap.

CVEs of Point Of Sale Xpress Server

• CVE-2017-15295 - CVSS 9.8 (critical), 2017-10-16: Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
• CVE-2017-15293 - CVSS 9.8 (critical), 2017-10-16: Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on…