Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap adaptive server enterpriseSAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system...CVE-2022-225287.8 High
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...CVE-2021-420674.3 Medium
- sap enterprise threat detectionSAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled...CVE-2022-225296.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...CVE-2022-225318.1 High
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...CVE-2021-442345.5 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...CVE-2022-225308.1 High
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not...CVE-2021-420615.4 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual...CVE-2021-420683.3 Low
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in...CVE-2021-420703.3 Low
- sap commerceIf configured to use an Oracle database and if a query is created using the flexible search java...CVE-2021-420649.8 Critical
- kyma-project kymaDue to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.CVE-2021-381828.8 High
- sap 3d visual enterprise viewerWhen a user opens manipulated Tagged Image File Format (.tif) file received from untrusted...CVE-2021-420693.3 Low
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...CVE-2021-420664.4 Medium
- sap knowledge warehouseA security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31...CVE-2021-42063Public exploitEPSS 23.4%6.1 Medium
- sap saf-t frameworkSAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path...CVE-2021-442327.7 High
- sap se netweaver as abap, sap netweaver application server abap +1 moreTwo methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730,...CVE-2021-442356.7 Medium
- sap access control, sap se grc access control +1 moreSAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary...CVE-2021-442338.8 High
- sap abap platform, netweaver application server abap, sap se abap server & abap platform (translation tools) +2 moreInternally used text extraction reports allow an attacker to inject code that can be executed by...CVE-2021-442319.8 Critical
- sap se erp hcm portugal, sap erp human capital management +1 moreSAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the...CVE-2021-420624.3 Medium
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...CVE-2021-405044.9 Medium
- sap gui for windowsAn information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7...CVE-2021-405037.8 High
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...CVE-2021-405028.8 High
- sap abap platform kernelSAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary...CVE-2021-405018.1 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (crystal reports) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows...CVE-2021-405007.5 High
- sap successfactors mobile, sap se successfactors mobile application (for android devices) +1 moreA vulnerability has been identified in SAP SuccessFactors Mobile Application for Android -...CVE-2021-404985.5 Medium
- sap netweaverSAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs,...CVE-2021-381836.1 Medium
- sap netweaver application server abap, sap se netweaver application server for abap (sap cloud print manager and sapsprint) +1 moreClient-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application...CVE-2021-404999.8 Critical
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752...CVE-2021-404964.3 Medium
- sap business oneSAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to...CVE-2021-381809.8 Critical
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreThe software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702...CVE-2021-381788.8 High
- sap businessobjects analysis, sap se businessobjects analysis, (edition for olap) +1 moreSAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to...CVE-2021-404975.3 Medium
- sap netweaver application server abap, netweaver abap, sap se netweaver as abap and abap platform +2 moreThere are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP...CVE-2021-404955.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752,...CVE-2021-381817.5 High
- sap business oneDebug function of Admin UI of SAP Business One Integration is enabled by default. This allows...CVE-2021-381794.9 Medium
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...CVE-2021-337046.3 Medium
- sap dmis, s4core, sapscore +2 more +4 moreDMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700,...CVE-2021-337019.1 Critical
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...CVE-2021-336989.9 Critical
- sap netweaver portal, sap se netweaver enterprise portal +1 moreThe SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...CVE-2021-337058.1 High
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...CVE-2021-337007.0 High
- sap cloud connectorSAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing...CVE-2021-336945.9 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (notification service) +1 moreNWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2021-336916.9 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a...CVE-2021-336935.7 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (sapui5) +1 moreUnder certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions -...CVE-2021-336974.7 Medium
- sap cloud connectorPotentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted...CVE-2021-336956.8 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file...CVE-2021-336925.2 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (crystal report) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does...CVE-2021-336965.4 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (component build service) +1 moreServer-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver...CVE-2021-33690Public exploitEPSS 69.1%9.9 Critical
- sap 3d visual enterprise viewerWhen a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise...CVE-2021-381744.3 Medium
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...CVE-2021-336884.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...CVE-2021-336865.3 Medium
- Show moreLoading…