Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap trexSAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related...CVE-2016-61409.8 Critical
- sap trexSAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors...CVE-2016-61399.8 Critical
- sap trexDirectory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read...CVE-2016-61389.8 Critical
- sap hana dbThe Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308...CVE-2016-36405.5 Medium
- sap netweaver, netweaver application server java +1 moreThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does...CVE-2010-5326In KEVEPSS 17.8%10.0 Critical
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to...CVE-2016-40187.3 High
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial...CVE-2016-40177.5 High
- sap java asCross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka...CVE-2016-40166.1 Medium
- sap netweaverThe Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a...CVE-2016-40157.5 High
- sap netweaverXML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows...CVE-2016-4014Public exploit8.6 High
- sap application server javaThe Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to...CVE-2016-39807.5 High
- sap java asInternet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote...CVE-2016-39797.5 High
- sap netweaver application server javaThe XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization,...CVE-2015-88408.8 High
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-3976In KEVPublic exploitEPSS 47.3%7.5 High
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-39756.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1...CVE-2016-3974Public exploitEPSS 14.4%9.1 Critical
- sap netweaver application server javaThe chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java...CVE-2016-39735.3 Medium
- google sketchup, sap 3d visual enterprise viewer +1 moreMultiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers...CVE-2016-25368.8 High
- sap netweaverDirectory traversal vulnerability in the GetFileList function in the SAP Manufacturing...CVE-2016-2389Public exploitEPSS 41.4%7.5 High
- sap netweaver, netweaver application server java +1 moreThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to...CVE-2016-2388In KEVPublic exploitEPSS 52.2%5.3 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet...CVE-2016-23876.1 Medium
- sap netweaver, netweaver application server java +1 moreSQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote...CVE-2016-2386In KEVPublic exploitEPSS 71.5%9.8 Critical
- sap hanaThe XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and...CVE-2016-19299.3 Critical
- sap hanaBuffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a...CVE-2016-19289.8 Critical
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers...CVE-2016-19116.1 Medium
- sap netweaverThe User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified...CVE-2016-1910Public exploit5.3 Medium
- sap afariaSAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock...CVE-2015-87539.1 Critical
- sap mobile platformThe SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass...CVE-2015-86007.5 High
- sap plant connectivityThe PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of...CVE-2015-83307.8 High
- sap manufacturing integration and intelligenceSAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption ...CVE-2015-83295.0 Medium
- sap hanaThe SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to...CVE-2015-79947.5 High
- sap hanaThe Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 ...CVE-2015-79937.5 High
- sap hanaSAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial...CVE-2015-79924.0 Medium
- sap hanaThe Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote...CVE-2015-79915.0 Medium
- sap hanaSAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote...CVE-2015-782810.0 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a...CVE-2015-80306.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a...CVE-2015-80296.8 Medium
- sap 3d visual enterprise viewerMultiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to...CVE-2015-80286.8 Medium
- sap hanaThe index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute...CVE-2015-7986Public exploit7.5 High
- sap businessobjects, businessobjects edge, businessobjects xi +2 moreSAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1...CVE-2015-773010.0 High
- sap hanaEval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer...CVE-2015-77296.5 Medium
- sap hanaCross-site scripting (XSS) vulnerability in user creation in the Web-based Development Workbench...CVE-2015-77283.5 Low
- sap hanaMultiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00...CVE-2015-77276.5 Medium
- sap hanaCross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench...CVE-2015-77263.5 Low
- sap hanaMultiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00...CVE-2015-77256.5 Medium
- sap hanaThe hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a...CVE-2015-65077.2 High
- sap netweaver j2ee engineSQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver...CVE-2015-72397.5 High
- sap mobile platformXML external entity (XXE) vulnerability in the application import functionality in SAP Mobile...CVE-2015-66646.8 Medium
- sap afariaCross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP...CVE-2015-66634.3 Medium
- sap netweaverXML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to...CVE-2015-66626.8 Medium
- Show moreLoading…