Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap enjoysapMultiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote...CVE-2007-3608Public exploit5.0 Medium
- sap enjoysapMultiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote...CVE-2007-3607Public exploit5.0 Medium
- sap enjoysapHeap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI...CVE-2007-3606Public exploit7.6 High
- sap enjoysapStack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui...CVE-2007-3605Public exploitEPSS 69.9%7.6 High
- sap netweaver nw04, netweaver nw04s, basis component 640 +1 more +3 moreCross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04...CVE-2007-34964.3 Medium
- sap basis component 700, basis component 640 +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework ...CVE-2007-34954.3 Medium
- sap rfc libraryThe RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109...CVE-2007-19185.0 Medium
- sap rfc libraryBuffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00...CVE-2007-191710.0 High
- sap rfc libraryBuffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before...CVE-2007-191610.0 High
- sap rfc libraryBuffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before...CVE-2007-19157.5 High
- sap rfc libraryThe RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote...CVE-2007-19147.8 High
- sap rfc libraryThe TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows...CVE-2007-19135.0 Medium
- sap internet graphics serverUnspecified vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 15 and earlier,...CVE-2006-634610.0 High
- sap internet graphics serverDirectory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and...CVE-2006-63457.5 High
- sap web application serverUnspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote...CVE-2006-60115.0 Medium
- sap web application serverSAP allows remote attackers to obtain potentially sensitive information such as operating system...CVE-2006-6010EPSS 14.3%5.0 Medium
- sap web application serverUnspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before...CVE-2006-57855.0 Medium
- sap web application serverUnspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and...CVE-2006-5784Public exploit4.6 Medium
- sap internet transaction serverMultiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server ...CVE-2006-5114Public exploit6.8 Medium
- sap internet graphics serverUnspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40...CVE-2006-41345.0 Medium
- sap internet graphics serverHeap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and...CVE-2006-41337.5 High
- sap sapdbaUnspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to...CVE-2006-254710.0 High
- sap web application serverSAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary...CVE-2006-1039Public exploit6.4 Medium
- sap business connectorDirectory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote...CVE-2006-07326.4 Medium
- sap business connectorWmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers...CVE-2006-0731Public exploit4.0 Medium
- sap r 3SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before...CVE-2005-48157.5 High
- sap web application serverCross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote...CVE-2005-3636Public exploit4.3 Medium
- sap web application serverMultiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10...CVE-2005-3635Public exploit4.3 Medium
- sap web application serverframeset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows...CVE-2005-3634Public exploitEPSS 17.8%5.0 Medium
- sap web application serverHTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10...CVE-2005-36335.0 Medium
- sap r 3Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows...CVE-2005-16915.0 Medium
- sap mysap business suiteMultiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute...CVE-2003-10397.5 High
- sap internet transaction serverThe AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain...CVE-2003-10385.0 Medium
- sap internet transaction serverFormat string vulnerability in the WGate component for SAP Internet Transaction Server (ITS)...CVE-2003-10377.5 High
- sap internet transaction serverMultiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow...CVE-2003-10367.5 High
- sap sapgui, r 3 +1 moreThe default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by...CVE-2003-10357.5 High
- sap dbThe (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user...CVE-2003-10337.2 High
- sap sapguiSAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a...CVE-2002-15795.0 Medium
- sap r 3The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows...CVE-2002-15787.5 High
- sap r 3SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows...CVE-2002-15777.5 High
- sap dblserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the...CVE-2002-1576Public exploit7.2 High
- sap dbThe Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session...CVE-2003-09457.5 High
- sap dbBuffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows...CVE-2003-09447.5 High
- sap dbweb-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which...CVE-2003-09437.5 High
- sap dbBuffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30...CVE-2003-09427.5 High
- sap dbweb-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent...CVE-2003-09417.5 High
- sap dbDirectory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows...CVE-2003-09405.0 Medium
- sap dbeo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may...CVE-2003-09397.5 High
- sap dbvos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM...CVE-2003-09387.2 High
- sap internet transaction serverCross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS)...CVE-2003-0749Public exploit6.8 Medium
- Show moreLoading…