Skip to contentSap Se vulnerabilities
Products
Show 49 moreShow less
Newest
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreSAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user...CVE-2022-352986.1 Medium
- sap netweaver application server abap, sap se netweaver as abap +1 moreAn attacker with basic business user privileges could craft and upload a malicious file to SAP...CVE-2022-352945.4 Medium
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...CVE-2022-352927.8 High
- sap host agent, sap se host agent (saposcol) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...CVE-2022-352954.9 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (open document) +1 moreSAP BusinessObjects Business Intelligence Platform (Open Document) - versions 430, 430, allows an...CVE-2022-322458.2 High
- sap enable now managerDue to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain...CVE-2022-352939.1 Critical
- sap authenticator, sap se authenticator for android +1 moreUnder certain conditions SAP Authenticator for Android allows an attacker to access information...CVE-2022-352907.5 High
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...CVE-2022-322497.5 High
- sap enterprise portalSAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently...CVE-2022-352246.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreSAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the...CVE-2022-352288.8 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-352256.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (wpc) +1 moreA vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently...CVE-2022-352276.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-351726.1 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...CVE-2022-351715.5 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (lcm) +1 moreSAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker...CVE-2022-351696.0 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not...CVE-2022-351706.1 Medium
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...CVE-2022-351687.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-322476.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreDue to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101,...CVE-2022-322485.3 Medium
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...CVE-2022-315938.8 High
- sap businessobjects bw publisher service, sap se businessobjects (bw publisher service) +1 moreSAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an...CVE-2022-315917.8 High
- sap sapscore, sap se s/4hana, sap s\/4hana +2 moreWithin SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application...CVE-2022-315975.4 Medium
- sap business one license service apiDue to missing authentication check, SAP Business one License service API - version 10.0 allows...CVE-2022-287717.5 High
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420...CVE-2022-296196.5 Medium
- sap enterprise extension defense forces \& public security, sap se enterprise extension defense forces & public security (ea-dfps) +1 moreThe application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606,...CVE-2022-315924.3 Medium
- sap se business objects, sap business objects business intelligence platform +1 moreDue to insufficient input validation, SAP Business Objects - version 420, allows an authenticated...CVE-2022-315985.4 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (visual difference application) +1 moreSAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420...CVE-2022-322464.6 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from...CVE-2022-322435.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted...CVE-2022-322425.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from...CVE-2022-322415.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from...CVE-2022-322405.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...CVE-2022-322395.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from...CVE-2022-322385.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from...CVE-2022-322375.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources...CVE-2022-322365.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted...CVE-2022-322355.5 Medium
- sap se financial consolidation, sap adaptive server enterprise +1 moreSAP Financial Consolidation - version 1010,?does not perform necessary authorization checks for...CVE-2022-315958.8 High
- sap adaptive server enterprise, sap se adaptive server enterprise (ase) +1 moreA highly privileged user can exploit SUID-root program to escalate his privileges to root on a...CVE-2022-315946.7 Medium
- sap powerdesigner proxy, sap se powerdesigner proxy 16.7 +1 moreSAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local...CVE-2022-315907.8 High
- sap erp financial accounting, erp localization for cee countries, s\/4hana +3 more +5 moreDue to improper authorization check, business users who are using Israeli File from SHAAM program...CVE-2022-315896.5 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (design time repository) +1 moreDue to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time...CVE-2022-296186.1 Medium
- sap netweaver developer studio, sap se netweaver developer studio (nwds) +1 moreSAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the...CVE-2022-296153.4 Low
- sap host agent, netweaver abap, sap se netweaver as abap, as java, abap platform and hana database +2 moreSAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP...CVE-2022-296145.0 Medium
- sap host agent, sap se netweaver, abap platform and sap host agent, sap netweaver abap +2 moreSAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7...CVE-2022-296124.3 Medium
- sap router, sap se netweaver and abap platform, sap netweaver as abap +2 more +4 moreDepending on the configuration of the route permission table in file 'saprouttab', it is possible...CVE-2022-276689.8 Critical
- sap netweaver, sap se netweaver (ep web page composer) +1 moreSome part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document...CVE-2022-282176.5 Medium
- sap business objects business intelligence platformBI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...CVE-2020-62204.4 Medium
- sap se cla assistant, sap contributor license agreement assistant +1 moreDue to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.CVE-2022-296176.5 Medium
- sap se host agent, netweaver and abap platform, sap netweaver as abap kernel +2 more +4 moreSAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in...CVE-2022-296167.5 High
- sap employee self service, sap se employee self service (fiori my leave request) +1 moreDue to insufficient input validation, SAP Employee Self Service allows an authenticated attacker...CVE-2022-296134.3 Medium
- Show moreLoading…