Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap identity management, sap se identity management (rest interface) +1 moreUnder certain conditions, it is possible to request the modification of role or privilege...CVE-2019-03018.8 High
- sap e-commerce, sap se e-commerce (sap-crmjav, sap-crmweb, sap-shrweb, sap-shrjav, sap-crmapp, sap-shrapp) +1 moreSAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled...CVE-2019-02986.1 Medium
- sap solution manager system, sap se solution manager system (st-pi) +1 moreRead of RFC destination does not always perform necessary authorization checks, resulting in...CVE-2019-02936.5 Medium
- sap solution managerUnder certain conditions Solution Manager, version 7.2, allows an attacker to access information...CVE-2019-02915.5 Medium
- sap businessobjects, sap se businessobjects business intelligence platform +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP),...CVE-2019-02897.1 High
- sap businessobjects, sap se businessobjects business intelligence platform (central management server) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Central Management...CVE-2019-02877.6 High
- sap treasury and risk management, sap se enterprise financial services (s4core), treasury and risk management(ea-finserv) +2 moreSAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8...CVE-2019-02808.8 High
- sap crystal reports, sap se crystal reports for visual studio +1 moreThe .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010)...CVE-2019-0285Public exploit9.8 Critical
- sap hanaSLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML...CVE-2019-02846.0 Medium
- sap netweaver process integration, sap se netweaver process integration (adapter engine) +1 moreSAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7...CVE-2019-02837.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...CVE-2019-02825.3 Medium
- sap se basis, sap business application software integrated solution +1 moreABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and...CVE-2019-02798.8 High
- sap netweaver process integration, sap se netweaver process integration (messaging system) +1 moreUnder certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration ...CVE-2019-02784.3 Medium
- sap hana extended application servicesSAP HANA extended application services, version 1, advanced does not sufficiently validate an XML...CVE-2019-02776.5 Medium
- sap banking services from sap, s\/4hana financial products subledger, sap se banking services from sap 9.0 (fsappl) +1 more +3 moreBanking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger ...CVE-2019-02768.8 High
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...CVE-2019-02755.4 Medium
- sap mobile platform sdkSAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service,...CVE-2019-02747.5 High
- sap kernel, sap se abap server, sap advanced business application programming platform +2 more +4 moreABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an...CVE-2019-02716.5 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for...CVE-2019-02708.8 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does...CVE-2019-02695.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (cmc module) +1 moreSAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30,...CVE-2019-02688.1 High
- sap manufacturing integration and intelligenceSAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator...CVE-2019-02678.8 High
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...CVE-2019-02667.5 High
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreSLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a...CVE-2019-02654.9 Medium
- sap businessobjects bi platform, sap se webintelligence bilaunchpad (enterprise) +1 moreSAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user...CVE-2019-02625.4 Medium
- sap se hana extended application services, sap landscape management +1 moreUnder certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced)...CVE-2019-02619.8 Critical
- sap businessobjects, sap se businessobjects business intelligence platform servers (enterprise) +1 moreSAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any...CVE-2019-02599.8 Critical
- sap disclosure managementSAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an...CVE-2019-02588.8 High
- sap netweaver as abap, netweaver application server abap, sap se abap platform(sap basis) +2 moreCustomizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02,...CVE-2019-02578.8 High
- sap business one, sap se business one mobile android app +1 moreUnder certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker...CVE-2019-02565.5 Medium
- sap disclosure managementSAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user...CVE-2019-02545.4 Medium
- sap businessobjects, sap se businessobjects business intelligence platform (fiori launchpad) +1 moreThe Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently...CVE-2019-02516.1 Medium
- sap landscape management, sap se landscape management(vcm) +1 moreUnder certain conditions SAP Landscape Management (VCM 3.0) allows an attacker to access...CVE-2019-02497.5 High
- sap basis, netweaver, sap se gateway of abap application server(sap basis) +1 more +3 moreUnder certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7...CVE-2019-02485.9 Medium
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be...CVE-2019-02479.8 Critical
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for...CVE-2019-02469.8 Critical
- sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 moreSAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8...CVE-2019-02455.4 Medium
- sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 moreSAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8...CVE-2019-02445.4 Medium
- sap bw\/4hana, sap se bw/4hana (dw4core) +1 moreUnder some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 ...CVE-2019-02438.8 High
- sap agentry sdk, work manager, sap se work and inventory manager (agentry sdk) +2 moreSAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent...CVE-2019-02417.5 High
- sap se business objects mobile for android, sap businessobjects mobile +1 moreSAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide...CVE-2019-02407.5 High
- sap hybris, sap se commerce (ex. sap hybris commerce) +1 moreSAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently...CVE-2019-02386.1 Medium
- sap financial consolidation cube designer, financial consolidation cube designer bobj eades, sap se financial consolidation cube designer (bobj eades) +2 moreA security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8...CVE-2018-24997.5 High
- sap ea-finserv, s4core, sapscore +5 more +7 moreSAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03;...CVE-2018-24848.8 High
- sap hanaThe security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these...CVE-2018-24972.7 Low
- sap disclosure managementSAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file...CVE-2018-24878.3 High
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an...CVE-2018-24697.5 High
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7...CVE-2018-24687.5 High
- sap hanaSAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not...CVE-2018-24657.5 High
- sap mobile platformUsers of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData...CVE-2018-24597.5 High
- Show moreLoading…