Skip to contentSap Netweaver vulnerabilities
- sap netweaverUnspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7...CVE-2014-85915.0 Medium
- sap netweaver java application serverXML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application...CVE-2014-85904.3 Medium
- sap commoncryptolib, hana, netweaver +2 more +4 moreSAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...CVE-2014-85877.5 High
- sap netweaver abapBusiness Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain...CVE-2014-83123.5 Low
- sap netweaverBuffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP...CVE-2014-62526.5 Medium
- sap netweaver business warehouseThe SAP Netweaver Business Warehouse component does not properly restrict access to the functions...CVE-2014-51743.5 Low
- sap netweaver business clientMultiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver...CVE-2014-41604.3 Medium
- sap netweaverThe System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify...CVE-2014-40037.5 High
- sap netweaverSAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User...CVE-2014-37875.0 Medium
- sap netweaver java application serverSAP Netweaver Java Application Server does not properly restrict access, which allows remote...CVE-2014-31335.0 Medium
- sap netweaver abap application serverThe ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP...CVE-2014-31304.6 Medium
- sap netweaver software lifecycle managerThe Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote...CVE-2014-31295.0 Medium
- sap netweaverAn unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict...CVE-2013-73647.5 High
- sap netweaverCross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the...CVE-2014-19654.3 Medium
- sap netweaver, netweaver exchange infrastructure \(bc-xi\) +1 moreCross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange...CVE-2014-19644.3 Medium
- sap netweaverUnspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to...CVE-2014-19635.0 Medium
- sap netweaverUnspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to...CVE-2014-19615.0 Medium
- sap netweaver, netweaver solution manager +1 moreThe Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...CVE-2014-19605.0 Medium
- sap netweaverSQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows...CVE-2013-70947.5 High
- sap netweaverSQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30...CVE-2013-68697.5 High
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via...CVE-2013-68236.4 Medium
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors,...CVE-2013-682210.0 High
- sap netweaverDirectory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows...CVE-2013-68215.0 Medium
- sap netweaver development infrastructureUnrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI)...CVE-2013-68209.3 High
- sap netweaverCross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote...CVE-2013-68194.3 Medium
- sap netweaver logviewerSAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended...CVE-2013-68186.4 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2)...CVE-2013-68164.3 Medium
- sap netweaverThe SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31...CVE-2013-68155.0 Medium
- sap netweaverThe J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect...CVE-2013-68145.8 Medium
- sap netweaverThe Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP...CVE-2013-62445.0 Medium
- sap netweaverDirectory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary...CVE-2013-57515.0 Medium
- sap netweaverSQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary...CVE-2013-57237.5 High
- sap netweaverThe GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote...CVE-2013-3319Public exploitEPSS 20.9%5.0 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and...CVE-2011-52634.3 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote...CVE-2011-52604.3 Medium
- sap netweaver abapMultiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote...CVE-2012-434110.0 High
- sap netweaverThe DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2612Public exploit5.0 Medium
- sap netweaverThe DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200...CVE-2012-2611Public exploitEPSS 44.3%9.3 High
- sap netweaverThe DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2514Public exploit5.0 Medium
- sap netweaverThe Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher...CVE-2012-2513Public exploit5.0 Medium
- sap netweaverThe DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2512Public exploit5.0 Medium
- sap netweaverThe DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2511Public exploit5.0 Medium
- sap netweaverUnspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote...CVE-2012-12925.0 Medium
- sap netweaverUnspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP...CVE-2012-12915.0 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm...CVE-2012-12904.3 Medium
- sap netweaverMultiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated...CVE-2012-12894.0 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver...CVE-2011-47074.3 Medium
- sap netweaver business clientStack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP...CVE-2010-45569.3 High
- sap netweaver, system landscape directory +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD)...CVE-2010-29044.3 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13...CVE-2010-16094.3 Medium
- Show moreLoading…