Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap hanaThe HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host...CVE-2014-27495.0 Medium
- sap enhancement packageThe Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote...CVE-2014-27487.5 High
- sap enterprise portalSAP Enterprise Portal does not properly restrict access to the Federation configuration pages,...CVE-2013-73677.5 High
- sap software deployment managerThe SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote...CVE-2013-73665.0 Medium
- sap enterprise portalCross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to...CVE-2013-73654.3 Medium
- sap netweaverAn unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict...CVE-2013-73647.5 High
- sap solution managerUnspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote...CVE-2013-73637.5 High
- sap ccms agentAn unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary...CVE-2013-73627.5 High
- sap cm services, cms services +1 moreDirectory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary...CVE-2013-73615.0 Medium
- sap adminadapterUnspecified vulnerability in SAP adminadapter allows remote attackers to read or write to...CVE-2013-73607.5 High
- sap mobile infrastructureUnspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain...CVE-2013-73595.0 Medium
- sap guided procedures archive monitorUnspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to...CVE-2013-73585.0 Medium
- sap j2ee engineUnspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers...CVE-2013-73575.0 Medium
- sap ccms \/ database monitorUnspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to...CVE-2013-73565.0 Medium
- sap bi universal data integrationSQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to...CVE-2013-73557.5 High
- sap netweaverCross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the...CVE-2014-19654.3 Medium
- sap netweaver, netweaver exchange infrastructure \(bc-xi\) +1 moreCross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange...CVE-2014-19644.3 Medium
- sap netweaverUnspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to...CVE-2014-19635.0 Medium
- sap customer relationship managementGwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via...CVE-2014-19625.0 Medium
- sap netweaverUnspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to...CVE-2014-19615.0 Medium
- sap netweaver, netweaver solution manager +1 moreThe Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...CVE-2014-19605.0 Medium
- sap emr unwiredMultiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute...CVE-2013-70967.5 High
- sap customer relationship managementThe XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has...CVE-2013-709510.0 High
- sap netweaverSQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows...CVE-2013-70947.5 High
- sap network interface routerSAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass...CVE-2013-70935.0 Medium
- sap netweaverSQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30...CVE-2013-68697.5 High
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via...CVE-2013-68236.4 Medium
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors,...CVE-2013-682210.0 High
- sap netweaverDirectory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows...CVE-2013-68215.0 Medium
- sap netweaver development infrastructureUnrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI)...CVE-2013-68209.3 High
- sap netweaverCross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote...CVE-2013-68194.3 Medium
- sap netweaver logviewerSAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended...CVE-2013-68186.4 Medium
- sap network interface routerHeap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote...CVE-2013-68176.8 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2)...CVE-2013-68164.3 Medium
- sap netweaverThe SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31...CVE-2013-68155.0 Medium
- sap netweaverThe J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect...CVE-2013-68145.8 Medium
- sap erp central componentUnspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the...CVE-2013-62847.5 High
- sap netweaverThe Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP...CVE-2013-62445.0 Medium
- sap erp central componentMultiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project...CVE-2013-32446.0 Medium
- sap netweaverDirectory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary...CVE-2013-57515.0 Medium
- sap netweaverSQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary...CVE-2013-57237.5 High
- sap netweaverThe GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote...CVE-2013-3319Public exploitEPSS 20.9%5.0 Medium
- sap basis communication servicesSAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute...CVE-2013-30636.0 Medium
- sap production planning and controlThe CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP...CVE-2013-30626.5 Medium
- sap erp central component, healthcare industry solution +1 moreThe ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital...CVE-2013-30616.5 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and...CVE-2011-52634.3 Medium
- sap netweaverCross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote...CVE-2011-52604.3 Medium
- sap graphical user interfaceMultiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP...CVE-2011-51546.9 Medium
- sap netweaver abapMultiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote...CVE-2012-434110.0 High
- sap netweaverThe DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the...CVE-2012-2612Public exploit5.0 Medium
- Show moreLoading…