Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap netweaverThe DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200...CVE-2012-2611Public exploitEPSS 44.3%9.3 High
- sap netweaverThe DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2514Public exploit5.0 Medium
- sap netweaverThe Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher...CVE-2012-2513Public exploit5.0 Medium
- sap netweaverThe DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2512Public exploit5.0 Medium
- sap netweaverThe DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2511Public exploit5.0 Medium
- sap netweaverUnspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote...CVE-2012-12925.0 Medium
- sap netweaverUnspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP...CVE-2012-12915.0 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm...CVE-2012-12904.3 Medium
- sap netweaverMultiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated...CVE-2012-12894.0 Medium
- sap crystal reports serverCross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008...CVE-2011-48054.3 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Netweaver...CVE-2011-47074.3 Medium
- sap crystal reportsHeap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in...CVE-2010-2590Public exploitEPSS 46.8%9.3 High
- sap netweaver business clientStack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP...CVE-2010-45569.3 High
- sap businessobjectsCmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain...CVE-2010-39839.0 High
- sap businessobjectsSAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to...CVE-2010-39825.0 Medium
- sap businessobjectsCross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote...CVE-2010-39814.3 Medium
- sap businessobjectsDswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be...CVE-2010-39804.0 Medium
- sap businessobjectsDswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending...CVE-2010-39795.0 Medium
- apache axis2, sap businessobjects +1 moreApache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D...CVE-2010-0219Public exploitEPSS 90.9%10.0 High
- sap business one 2005-aStack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80...CVE-2009-4988Public exploitEPSS 65.5%10.0 High
- sap crystal reportsInteger overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module...CVE-2010-303210.0 High
- sap netweaver, system landscape directory +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD)...CVE-2010-29044.3 Medium
- sap j2ee engine core, server core +1 moreThe Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core ...CVE-2010-23474.9 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13...CVE-2010-16094.3 Medium
- sap maxdbStack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows...CVE-2010-1185Public exploitEPSS 15.2%10.0 High
- sap kernelUnspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and...CVE-2009-46035.0 Medium
- sap crystal reports serverUnspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute...CVE-2009-334610.0 High
- sap crystal reports serverHeap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack...CVE-2009-334510.0 High
- sap crystal reports serverUnspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to...CVE-2009-33445.0 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP...CVE-2009-29324.3 Medium
- sap guiInsecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL...CVE-2008-4830Public exploitEPSS 27.6%9.3 High
- sap sapguiStack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui...CVE-2007-4475Public exploitEPSS 40.3%9.3 High
- sap netweaverCross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when...CVE-2008-33584.3 Medium
- componentone sizerone, sap gui, tabone +1 more +3 moreMultiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX...CVE-2008-48279.3 High
- sap sapgui, simba technologies mdrmsap activex control +1 moreUnspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui...CVE-2008-4387EPSS 15.5%9.3 High
- sap maxdbUntrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users...CVE-2008-18104.4 Medium
- sap web application server, web dynpro +1 moreCross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0,...CVE-2008-2421Public exploit4.3 Medium
- sap internet transaction serverCross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20...CVE-2008-2123Public exploit4.3 Medium
- sap netweaverThe default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure...CVE-2008-18464.3 Medium
- sap business objectsStack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX...CVE-2007-62549.3 High
- sap maxdbInteger signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows...CVE-2008-03079.3 High
- sap maxdbsdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute...CVE-2008-03066.9 Medium
- sap saplpd, sapsprint, sapgui +2 moreBuffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018...CVE-2008-0621Public exploitEPSS 73.4%7.5 High
- sap saplpd, sapsprint, sapgui +2 moreSAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote...CVE-2008-062010.0 High
- sap maxdbSAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via ...CVE-2008-0244Public exploitEPSS 80.3%10.0 High
- sap saplpd, sapsprint +1 moreUnspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial...CVE-2006-72207.8 High
- sap message serverHeap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote...CVE-2007-3624Public exploitEPSS 37.4%10.0 High
- sap internet communication manager, web application server +1 moreInternet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and...CVE-2007-36157.8 High
- sap dbMultiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB,...CVE-2007-3614Public exploitEPSS 70.0%7.5 High
- sap internet graphics serverCross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS)...CVE-2007-3613Public exploit4.3 Medium
- Show moreLoading…