Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap document management servicesSAP Document Management Services allows local users to execute arbitrary commands via unspecified...CVE-2014-86607.2 High
- sap environment health and safetyDirectory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers...CVE-2014-86595.0 Medium
- sap netweaverThe Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to...CVE-2014-0995Public exploitEPSS 10.5%5.0 Medium
- sap netweaverUnspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote...CVE-2014-85925.0 Medium
- sap netweaverUnspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7...CVE-2014-85915.0 Medium
- sap netweaver java application serverXML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application...CVE-2014-85904.3 Medium
- sap network interface routerInteger overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers to...CVE-2014-85895.0 Medium
- sap hanaSQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers...CVE-2014-85887.5 High
- sap commoncryptolib, hana, netweaver +2 more +4 moreSAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...CVE-2014-85877.5 High
- sap businessobjects explorerXML External Entity (XXE) vulnerability in polestar_xml.jsp in SAP BusinessObjects Explorer 14.0...CVE-2014-83165.0 Medium
- sap businessobjects explorerpolestar_xml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing...CVE-2014-83155.0 Medium
- sap hanaMultiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70...CVE-2014-83144.3 Medium
- sap hanaEval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows...CVE-2014-83136.0 Medium
- sap netweaver abapBusiness Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain...CVE-2014-83123.5 Low
- sap businessobjectsSAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information via an...CVE-2014-83113.5 Low
- sap businessobjectsThe CMS CORBA listener in SAP BusinessObjects BI Edge 4.0 allows remote attackers to cause a...CVE-2014-83107.1 High
- sap businessobjects, businessobjects xi +1 moreSAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a...CVE-2014-83095.0 Medium
- sap businessobjectsCross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP...CVE-2014-83084.3 Medium
- sap netweaverBuffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP...CVE-2014-62526.5 Medium
- sap crystal reportsDouble free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary...CVE-2014-55066.8 Medium
- sap crystal reportsStack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary...CVE-2014-55056.8 Medium
- sap fi manager self-serviceSAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote...CVE-2014-51766.0 Medium
- sap solution managerThe License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to bypass...CVE-2014-51757.5 High
- sap netweaver business warehouseThe SAP Netweaver Business Warehouse component does not properly restrict access to the functions...CVE-2014-51743.5 Low
- sap hana extended application servicesSAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions...CVE-2014-51735.0 Medium
- sap hanaMultiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA...CVE-2014-51724.3 Medium
- sap hana extended application servicesSAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that...CVE-2014-51712.9 Low
- sap supplier relationship managementCross-site scripting (XSS) vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship...CVE-2014-41614.3 Medium
- sap netweaver business clientMultiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver...CVE-2014-41604.3 Medium
- sap supplier relationship managementOpen redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM)...CVE-2014-41595.8 Medium
- sap open hub serviceSAP Open Hub Service has hardcoded credentials, which makes it easier for remote attackers to...CVE-2014-40125.0 Medium
- sap capacity levelingSAP Capacity Leveling has hardcoded credentials, which makes it easier for remote attackers to...CVE-2014-40115.0 Medium
- sap transaction data poolSAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers...CVE-2014-40105.0 Medium
- sap computing center management system monitoringSAP CCMS Monitoring (BC-CCM-MON) has hardcoded credentials, which makes it easier for remote...CVE-2014-40095.0 Medium
- sap web services toolSAP Web Services Tool (CA-WUI-WST) has hardcoded credentials, which makes it easier for remote...CVE-2014-40085.0 Medium
- sap upgrade toolsThe SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote...CVE-2014-40075.0 Medium
- sap oil industry solution traders and schedulers workbenchThe SAP Trader's and Scheduler's Workbench (TSW) for SAP Oil & Gas has hardcoded credentials,...CVE-2014-40065.0 Medium
- sap brazilSAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain...CVE-2014-40055.0 Medium
- sap project systemThe (1) Structures and (2) Project-Oriented Procurement components in SAP Project System has...CVE-2014-40045.0 Medium
- sap netweaverThe System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify...CVE-2014-40037.5 High
- sap netweaverSAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User...CVE-2014-37875.0 Medium
- sap businessobjectsCross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects...CVE-2014-31344.3 Medium
- sap netweaver java application serverSAP Netweaver Java Application Server does not properly restrict access, which allows remote...CVE-2014-31335.0 Medium
- sap background processingSAP Background Processing does not properly restrict access, which allows remote authenticated...CVE-2014-31324.0 Medium
- sap profile maintenanceSAP Profile Maintenance does not properly restrict access, which allows remote authenticated...CVE-2014-31314.0 Medium
- sap netweaver abap application serverThe ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP...CVE-2014-31304.6 Medium
- sap netweaver software lifecycle managerThe Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote...CVE-2014-31295.0 Medium
- sap routerThe passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier...CVE-2014-0984Public exploit4.3 Medium
- sap business object processing framework for abapSAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes...CVE-2014-27527.5 High
- sap print and output managementSAP Print and Output Management has hardcoded credentials, which makes it easier for remote...CVE-2014-27517.5 High
- Show moreLoading…