Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap adaptive server enterpriseUnder certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged...CVE-2018-24576.5 Medium
- sap hana extended application servicesXS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS...CVE-2018-24516.6 Medium
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request...CVE-2018-24395.9 Medium
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of...CVE-2018-24387.5 High
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to...CVE-2018-24379.1 Critical
- sap gateway, kernel +1 moreSAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7...CVE-2018-24337.5 High
- sap infrastructure, ui, sap se ui for sap netweaver 7.00 +2 moreUnder certain conditions SAP UI5 Handler allows an attacker to access information which would...CVE-2018-24285.3 Medium
- sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an...CVE-2018-24258.4 High
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...CVE-2018-24249.8 Critical
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows...CVE-2018-24235.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...CVE-2018-24225.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...CVE-2018-24215.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload...CVE-2018-24206.5 Medium
- sap ea-finserv, s4core, sapscore +3 more +5 moreSAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05,...CVE-2018-24193.7 Low
- sap maxdb odbc driverSAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can...CVE-2018-24185.5 Medium
- sap identity managementUnder certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an...CVE-2018-24175.3 Medium
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 moreSAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7...CVE-2018-24154.7 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...CVE-2018-24135.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...CVE-2018-24123.8 Low
- sap business oneSAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs,...CVE-2018-24105.4 Medium
- sap cloud platform, sap se cloud platform connector +1 moreImproper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud...CVE-2018-24096.3 Medium
- sap se business objects, sap businessobjects +1 moreImproper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI...CVE-2018-24087.3 High
- sap crystal reports server, sap se crystal reports server, oem edition +1 moreUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server,...CVE-2018-24065.3 Medium
- sap solution managerSAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a...CVE-2018-24055.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format...CVE-2018-24044.3 Medium
- sap disclosure managementUnder certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information...CVE-2018-24035.4 Medium
- sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP...CVE-2018-24027.6 High
- redwood sap business process automation, sap se business process automation (bpa) by redwood +1 moreSAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document...CVE-2018-24015.4 Medium
- sap process monitoring infrastructureCross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7...CVE-2018-23996.1 Medium
- sap business clientUnder certain conditions SAP Business Client 6.5 allows an attacker to access information which...CVE-2018-23986.7 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreIn SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central...CVE-2018-23975.4 Medium
- redwood sap business process automation, sap se business process automation (bpa) by redwood +1 moreSAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit...CVE-2018-23664.3 Medium
- sap se crm, sap customer relationship management (crm), customer relationship management +2 moreSAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation...CVE-2018-2380In KEVPublic exploitEPSS 28.9%6.6 Medium
- sap netweaver system landscape directory, sap se netweaver system landscape directory, lm-core +1 moreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform...CVE-2018-23689.8 Critical
- sap business application software integrated solution, sap se basis (abap file interface) +1 moreABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7...CVE-2018-23678.8 High
- sap netweaver portal, sap se netweaver portal webdynpro runtime +1 moreSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-23656.1 Medium
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...CVE-2018-23966.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user may retrieve information on SAP Internet Graphic Server...CVE-2018-23958.8 High
- sap internet graphics serverUnder certain conditions an unauthenticated malicious user can prevent legitimate users from...CVE-2018-23946.5 Medium
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...CVE-2018-2393EPSS 15.5%7.5 High
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...CVE-2018-2392Public exploitEPSS 41.1%7.5 High
- sap internet graphics serverUnder certain conditions a malicious user can inject log files of SAP Internet Graphics Server ...CVE-2018-23895.7 Medium
- sap internet graphics serverStored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7...CVE-2018-23886.1 Medium
- sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow...CVE-2018-23876.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking an out of bounds buffer overflow can prevent...CVE-2018-23866.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking a divide by zero crash can prevent legitimate...CVE-2018-23856.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking a Null Pointer dereference can prevent...CVE-2018-23846.5 Medium
- sap internet graphics serverReflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45...CVE-2018-23836.1 Medium
- sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow...CVE-2018-23826.5 Medium
- sap erp financials information systemSAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN...CVE-2018-23818.8 High
- Show moreLoading…