Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...CVE-2021-214524.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received...CVE-2021-214604.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...CVE-2021-214594.3 Medium
- sap cla-assistantIn CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity…CVE-2021-214716.5 Medium
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the...CVE-2020-268363.4 Low
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated...CVE-2020-268378.5 High
- sap business warehouse, sap se bw4hana, sap bw\/4hana +2 moreSAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782,...CVE-2020-268389.1 Critical
- sap se s4 hana (sap landscape transformation), sap netweaver application server abap, s\/4 hana +1 more +3 moreSAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700,...CVE-2020-268327.6 High
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL...CVE-2020-268355.3 Medium
- sap hana databaseSAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML...CVE-2020-268344.2 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreProcess Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...CVE-2020-268266.5 Medium
- sap disclosure management, sap se disclosure management. +1 moreSAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload...CVE-2020-268285.4 Medium
- sap se businessobjects bi platform (crystal report), sap businessobjects business intelligence platform +1 moreSAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently...CVE-2020-268319.6 Critical
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary...CVE-2020-268307.6 High
- sap se netweaver as java (p2p cluster communication), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50,...CVE-2020-2682910.0 Critical
- sap netweaver application server java, sap se netweaver as java (key storage service) +1 moreSAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the...CVE-2020-268165.4 Medium
- sap adaptive server enterpriseIn certain situations, an attacker with regular user credentials and local access to an ASE...CVE-2020-63172.6 Low
- sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 moreSAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an...CVE-2020-268256.1 Medium
- sap erp client for e-bilanz, sap se erp client for e-bilanz 1.0 +1 moreSAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem...CVE-2020-268074.4 Medium
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...CVE-2020-268107.5 High
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...CVE-2020-2682310.0 Critical
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...CVE-2020-2682110.0 Critical
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...CVE-2020-268186.5 Medium
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...CVE-2020-2682410.0 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file...CVE-2020-268174.3 Medium
- sap solution manager, sap se solution manager (java stack) +1 moreSAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to...CVE-2020-2682210.0 Critical
- sap process integration \(pgp module - business-to-business add on\), sap se process integration (pgp - module business-to-business add on) +1 moreSAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an...CVE-2020-268144.9 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreSAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...CVE-2020-268209.1 Critical
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...CVE-2020-268195.4 Medium
- sap se fiori launchpad (news tile application), sap fiori launchpad \(news tile application\) +1 moreSAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an...CVE-2020-268158.6 High
- sap se as abap(dmis), s4 hana(dmis), sap as abap\(dmis\) +1 more +3 moreSAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730,...CVE-2020-268089.1 Critical
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...CVE-2020-268115.3 Medium
- sap erp, sap se s/4 hana, sap s\/4hana +2 moreSAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he...CVE-2020-63164.3 Medium
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...CVE-2020-268095.3 Medium
- sap netweaver design time repository, sap se netweaver (di design time repository) +1 moreSAP NetWeaver Design Time Repository (DTR), versions - 7.11, 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-63704.8 Medium
- sap netweaver composite application frameworkThere is a reflected cross site scripting vulnerability in SAP NetWeaver Composite Application...CVE-2020-63678.2 High
- sap banking servicesSAP Banking Services version 500, use an incorrect authorization object in some of its reports....CVE-2020-63624.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web services) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430,...CVE-2020-6308Public exploitEPSS 61.7%5.3 Medium
- sap focused run, solution manager, sap se ca introscope enterprise manager (affected products: sap solution manager and sap focused run) +2 moreSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10...CVE-2020-63697.5 High
- sap se netweaver (compare systems), sap netweaver compare systems +1 moreSAP NetWeaver (Compare Systems) versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate...CVE-2020-63667.6 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file...CVE-2020-63155.7 Medium
- sap netweaver application server javaSAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an...CVE-2020-63654.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere...CVE-2020-63764.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter...CVE-2020-63744.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer...CVE-2020-63754.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received...CVE-2020-63734.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received...CVE-2020-63724.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap (powl test application) +1 moreUser enumeration vulnerability can be exploited to get a list of user accounts and personal user...CVE-2020-63714.3 Medium
- sap introscope enterprise manager, sap se solution manager (ca introscope enterprise manager) and sap focused run (ca introscope enterprise manager) +1 moreSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10...CVE-2020-6364Public exploit10.0 Critical
- sap business planning and consolidationSAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200,...CVE-2020-63685.4 Medium
- Show moreLoading…