Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap enterprise central componentUntrusted search path vulnerability in SAP Enterprise Central Component (ECC) allows local users...CVE-2015-36219.3 High
- sap afariaThe Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone:...CVE-2015-34497.2 High
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read...CVE-2015-50687.5 High
- sap netweaverThe (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded...CVE-2015-50677.5 High
- sap afariaSAP Afaria does not properly restrict access to unspecified functionality, which allows remote...CVE-2015-41617.5 High
- sap ase database platformSQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute...CVE-2015-41607.5 High
- sap hana web-based development workbenchSQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers...CVE-2015-41597.5 High
- sap netweaver abap application server, netweaver java application server +1 moreSAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination)...CVE-2015-41585.0 Medium
- sap content serverSAP Content Server allows remote attackers to cause a denial of service (service termination) via...CVE-2015-41575.0 Medium
- sap gui, maxdb, netweaver rfc sdk +3 more +5 moreStack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC...CVE-2015-22827.5 High
- sap gui, maxdb, netweaver rfc sdk +3 more +5 moreThe LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in...CVE-2015-22785.0 Medium
- sap hanaSAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary...CVE-2015-39954.0 Medium
- sap hanaThe grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00...CVE-2015-39944.0 Medium
- sap afariaBuffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to...CVE-2015-40927.5 High
- sap netweaver application server javaXML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to...CVE-2015-40917.5 High
- sap netweaver rfc sdkSAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors,...CVE-2015-39815.0 Medium
- sap customer relationship managementSQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows...CVE-2015-39807.5 High
- sap customer relationship managementUnspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows...CVE-2015-39797.5 High
- sap sybase unwired platform online data proxySAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and...CVE-2015-39782.1 Low
- sap afariaBuffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial...CVE-2015-28205.0 Medium
- sap sql anywhereSAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash)...CVE-2015-28195.0 Medium
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send...CVE-2015-28185.0 Medium
- sap netweaverThe SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive...CVE-2015-28175.0 Medium
- sap afariaThe XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote...CVE-2015-28167.5 High
- sap netweaverBuffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000...CVE-2015-28156.5 Medium
- sap clinical task tracker, emr unwired +1 moreSAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile...CVE-2015-28146.4 Medium
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send...CVE-2015-28135.0 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31...CVE-2015-28125.0 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31...CVE-2015-28115.0 Medium
- sap businessobjects edgeThe Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive...CVE-2015-20765.0 Medium
- sap businessobjects edgeSAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee...CVE-2015-20755.0 Medium
- sap hanaMultiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA...CVE-2015-20724.3 Medium
- sap enterprise resource planningThe Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to...CVE-2015-13127.5 High
- sap hana extended application servicesThe Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary...CVE-2015-131110.0 High
- sap netweaver abapXML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP...CVE-2015-13095.0 Medium
- sap kernelBuffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows...CVE-2014-95956.5 Medium
- sap kernelBuffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows...CVE-2014-95946.5 Medium
- sap netweaver business client for htmlMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for...CVE-2014-95694.3 Medium
- sap businessobjectsSAP BusinessObjects Edge 4.1 allows remote attackers to obtain the...CVE-2014-938710.0 High
- sap sql anywhereStack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers...CVE-2014-92647.5 High
- sap governance risk and complianceMultiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote...CVE-2013-36789.0 High
- sap customer relationship managementThe SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to...CVE-2014-866910.0 High
- sap contract accountingSQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute...CVE-2014-86687.5 High
- sap hana web-based development workbenchCross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows...CVE-2014-86674.3 Medium
- sap business intelligence development workbenchThe User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP...CVE-2014-86665.0 Medium
- sap business intelligence development workbenchThe SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive...CVE-2014-86655.0 Medium
- sap environment health and safetySQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and...CVE-2014-86647.5 High
- sap netweaver business warehouseSQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows...CVE-2014-86637.5 High
- sap payroll processUnspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of...CVE-2014-86627.8 High
- sap customer relationship management internet salesThe SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via...CVE-2014-866110.0 High
- Show moreLoading…