Sap Ui vulnerabilities

• sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 more Information Disclosure vulnerability in S/4HANA (Manage Payment Media) CVE-2026-24314 4.3 MediumFebruary 24, 2026
• sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) CVE-2026-0488 9.9 CriticalFebruary 10, 2026
• sap document builder Missing Authorization check in SAP Document Builder CVE-2024-39591 4.3 MediumAugust 13, 2024
• sap transportation management, sap se transportation management (collaboration portal), sap saptmui +2 more [CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal) CVE-2024-37171 5.0 MediumJuly 9, 2024
• sap gui for windows [CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows CVE-2024-39600 5.0 MediumJuly 9, 2024
• sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) CVE-2024-37175 4.3 MediumJuly 9, 2024
• sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) CVE-2024-39598 5.0 MediumJuly 9, 2024
• sap customer relationship management s4fnd, customer relationship management webclient ui, sap se crm webclient ui +2 more [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) CVE-2024-37174 6.1 MediumJuly 9, 2024
• sap se crm webclient ui, sap customer relationship management s4fnd, customer relationship management webclient ui +2 more [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) CVE-2024-37173 6.1 MediumJuly 9, 2024
• sap customer relationship management webclient ui, sap se crm webclient ui +1 more Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) CVE-2024-34686 6.1 MediumJune 11, 2024
• sap document builder Unrestricted file upload in SAP Document Builder (HTTP service) CVE-2024-34683 6.5 MediumJune 11, 2024
• sap se crm (webclient ui), sap crm - webclient ui +1 more Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) CVE-2024-24742 4.1 MediumFebruary 13, 2024
• sap se crm webclient ui, sap crm - webclient ui +1 more Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI CVE-2024-22130 7.6 HighFebruary 13, 2024
• sap gui connector, sap se microsoft edge browser extension (sap gui connector for microsoft edge) +1 more Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) CVE-2024-22125 7.4 HighJanuary 9, 2024
• sap ui, sap se ui5 variant management +1 more Stored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant Management CVE-2023-33991 8.2 HighJune 13, 2023
• sap gui for windows Information Disclosure vulnerability in SAP GUI for Windows CVE-2023-32113 7.5 HighMay 9, 2023
• sap sapui5 Improper Neutralization of Input in SAPUI5 CVE-2023-30743 7.1 HighMay 9, 2023
• sap se crm (webclient ui), sap customer relationship management s4fnd, customer relationship management webclient ui +2 more Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) CVE-2023-30742 6.1 MediumMay 9, 2023
• sap s4fnd, sapscore, sap se crm webclient ui +1 more +3 more Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI CVE-2023-29188 5.4 MediumMay 9, 2023
• sap crm (webclient ui), customer relationship management s4fnd, customer relationship management webclient ui +2 more HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI) CVE-2023-29189 5.4 MediumApril 11, 2023
• sap s4fnd, crm (webclient ui), customer relationship management webclient ui +2 more SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently... CVE-2023-24525 4.3 MediumFebruary 14, 2023
• sap commerce webservices 2.0 (swagger ui), commerce webservices 2.0 +1 more Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions... CVE-2022-41266 8.0 HighDecember 13, 2022
• sap gui, sap se gui for windows +1 more SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful... CVE-2022-41205 5.5 MediumNovember 8, 2022
• sap sapui5 library, sap se sapui5 (vbm library) +1 more Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75,... CVE-2022-28770 6.1 MediumApril 12, 2022
• sap gui for windows An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7... CVE-2021-40503 7.8 HighNovember 10, 2021
• sap netweaver guided procedures, sap se netweaver guided procedures (administration workset) +1 more SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40... CVE-2021-33671 7.6 HighJuly 14, 2021
• sap gui for windows In specific situations SAP GUI for Windows, versions - 7.60, 7.70 forwards a user to specific... CVE-2021-27612 3.4 LowMay 11, 2021
• sap ui5 SAP UI5, versions - 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1, allows... CVE-2021-21476 4.7 MediumFebruary 9, 2021
• less-openui5 project less-openui5 Arbitrary code execution in less-openui5 CVE-2021-21316 Fix available 6.3 MediumJanuary 29, 2021
• sap se s/4 hana (fiori ui for general ledger accounting), sap s\/4 hana fiori ui for general ledger accounting +1 more SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform... CVE-2020-6273 4.3 MediumAugust 12, 2020
• sap se netweaver (guided procedures), sap netweaver guided procedures +1 more SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not... CVE-2020-6187 4.9 MediumFebruary 12, 2020
• sap ui, sap se ui 700 +1 more SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700... CVE-2019-0388 5.3 MediumNovember 13, 2019
• sap gateway, ui5 +1 more The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is... CVE-2019-0319 7.5 HighJuly 10, 2019
• sap openui5, sap se sapui5 +1 more SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not... CVE-2019-0281 6.1 MediumJuly 10, 2019
• sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 more SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8... CVE-2019-0245 5.4 MediumJanuary 8, 2019
• sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 more SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8... CVE-2019-0244 5.4 MediumJanuary 8, 2019
• sap marketing sapscore, marketing uicuan, marketing (sapscore) +1 more +3 more SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode... CVE-2018-2486 5.4 MediumDecember 11, 2018
• sap netweaver, user interface technology, netweaver (ui infra) +3 more +5 more A content spoofing vulnerability in the following components allows to render html pages... CVE-2018-2434 4.3 MediumJuly 10, 2018
• sap businessobjects business intelligence, businessobjects business intelligence suite +1 more SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently... CVE-2018-2431 6.1 MediumJuly 10, 2018
• sap businessobjects business intelligence, crystal reports, businessobjects business intelligence suite +2 more SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports ... CVE-2018-2427 8.8 HighJuly 10, 2018
• sap infrastructure, ui, sap se ui for sap netweaver 7.00 +2 more Under certain conditions SAP UI5 Handler allows an attacker to access information which would... CVE-2018-2428 5.3 MediumJune 12, 2018
• sap hana database, ui, ui5 +3 more +5 more SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to... CVE-2018-2424 9.8 CriticalJune 12, 2018
• sap s4fnd, sap se crm webclient ui, sap customer relationship management webclient ui +2 more SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently... CVE-2018-2364 6.1 MediumFebruary 14, 2018
• sap e-recruiting An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through 617. When an external... CVE-2017-14511 7.5 HighSeptember 17, 2017
• sap gui for windows SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions... CVE-2017-6950 9.8 CriticalMarch 23, 2017
• sap gui, maxdb, netweaver rfc sdk +3 more +5 more Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC... CVE-2015-2282 7.5 HighJune 2, 2015
• sap gui, maxdb, netweaver rfc sdk +3 more +5 more The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in... CVE-2015-2278 5.0 MediumJune 2, 2015
• sap guided procedures archive monitor Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to... CVE-2013-7358 5.0 MediumApril 10, 2014
• sap gui Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL... CVE-2008-4830 Public exploit EPSS 27.6% 9.3 HighApril 16, 2009
• sap sapgui Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui... CVE-2007-4475 Public exploit EPSS 40.3% 9.3 HighApril 1, 2009
• Show olderLoading…