Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received...CVE-2020-63344.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file...CVE-2020-63354.3 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreImproper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and...CVE-2020-63104.3 Medium
- sap netweaver application server java, sap se netweaver as java (engineapi), netweaver as java (j2ee-frmw) +1 more +3 moreSAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50;...CVE-2020-63097.5 High
- sap hcm travel management, sap se erp (hcm travel management) +1 moreSAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an...CVE-2020-63015.4 Medium
- sap se business objects business intelligence platform (central management console), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Central Management Console), versions- 4.2,...CVE-2020-63004.8 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755,...CVE-2020-62994.3 Medium
- sap generic market data, sap se banking services (generic market data) +1 moreSAP Banking Services (Generic Market Data), versions - 400, 450, 500, allows an unauthorized user...CVE-2020-62988.3 High
- sap data intelligenceUnder certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0,...CVE-2020-62976.3 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740,...CVE-2020-62968.3 High
- sap adaptive server enterpriseUnder certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to...CVE-2020-62957.0 High
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreXvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on...CVE-2020-62948.5 High
- sap se netweaver (knowledge management), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an...CVE-2020-62937.3 High
- sap se netweaver (knowledge management), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic...CVE-2020-62849.0 Critical
- sap se s/4 hana (fiori ui for general ledger accounting), sap s\/4 hana fiori ui for general ledger accounting +1 moreSAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform...CVE-2020-62734.3 Medium
- sap disclosure managementLogout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the...CVE-2020-62924.6 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, session mechanism does not have expiration data set...CVE-2020-62915.4 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the...CVE-2020-62904.2 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request...CVE-2020-62894.3 Medium
- sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-6287In KEVPublic exploitEPSS 94.7%10.0 Critical
- sap se netweaver as java (lm configuration wizard), sap netweaver application server java +1 moreThe insufficient input path validation of certain parameter in the web service of SAP NetWeaver...CVE-2020-6286Public exploitEPSS 24.3%5.3 Medium
- sap netweaver, sap se netweaver - xml toolkit for java (engineapi) +1 moreSAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7...CVE-2020-62857.7 High
- sap se netweaver as java (iiop service) (core-tools), netweaver as java (iiop service) (servercore), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7...CVE-2020-62825.8 Medium
- sap se business objects business intelligence platform (bi launchpad), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not...CVE-2020-62816.1 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with...CVE-2020-62802.7 Low
- sap se business objects business intelligence platform (bi launchpad and cmc), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2,...CVE-2020-62785.4 Medium
- sap se business objects business intelligence platform (bipodata), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (bipodata), version 4.2, does not...CVE-2020-62766.1 Medium
- sap disclosure managementSome sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag,...CVE-2020-62676.3 Medium
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log...CVE-2020-62615.3 Medium
- sap fiori, sap se fiori for sap s/4hana +1 moreSAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to...CVE-2020-62665.4 Medium
- sap commerceSAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under...CVE-2020-62648.6 High
- sap se netweaver as java, sap netweaver application server java +1 moreStandalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...CVE-2020-62636.9 Medium
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data...CVE-2020-62606.5 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754,...CVE-2020-62757.6 High
- sap solution manager, sap se solution manager (problem context manager) +1 moreSAP Solution Manager (Problem Context Manager), version 7.2, does not perform the necessary...CVE-2020-62718.2 High
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows...CVE-2020-62694.3 Medium
- sap se netweaver as abap (banking services), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C,...CVE-2020-62706.5 Medium
- sap erp \(ea-finserv\), erp \(s4core\), sap se erp (statutory reporting for insurance companies) +2 moreStatutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605,...CVE-2020-62685.4 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application sbspext table) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_TABLE, versions 700, 701,...CVE-2020-62466.1 Medium
- sap business one, sap se business one (backup service) +1 moreUnder certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an...CVE-2020-62394.4 Medium
- sap commerce, sap se commerce (data hub), sap commerce data hub +2 moreSAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808...CVE-2020-62659.8 Critical
- sap se business objects business intelligence platform (live data connect), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.x,...CVE-2020-62429.8 Critical
- sap identity managementSAP Identity Management, version 8.0, does not perform necessary authorization checks for an...CVE-2020-62584.3 Medium
- sap enterprise threat detectionSAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response...CVE-2020-62546.1 Medium
- sap adaptive server enterpriseSAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted...CVE-2020-62418.8 High
- sap adaptive server enterpriseUnder certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker...CVE-2020-62596.5 Medium
- sap se adaptive server enterprise (cockpit), sap adaptive server enterprise cockpit +1 moreUnder certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an...CVE-2020-62529.0 Critical
- sap adaptive server enterprise, sap se adaptive server enterprise (web services) +1 moreUnder certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0,...CVE-2020-62537.2 High
- sap business clientSAP Business Client, version 7.0, allows an attacker after a successful social engineering attack...CVE-2020-62447.0 High
- sap se business objects business intelligence platform (cmc and bi launchpad), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not...CVE-2020-62575.4 Medium
- Show moreLoading…