Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap netweaverdisp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of...CVE-2017-98457.5 High
- sap netweaverSAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly...CVE-2017-98447.5 High
- sap netweaver abapSAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a...CVE-2017-98432.7 Low
- sap successfactorsStored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows...CVE-2017-96135.4 Medium
- sap business oneSAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE)...CVE-2016-6256Public exploit9.6 Critical
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of...CVE-2017-89157.5 High
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or...CVE-2017-89148.3 High
- sap netweaver application server javaThe Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote...CVE-2017-89138.8 High
- sap sapcarSAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a...CVE-2017-8852Public exploit7.8 High
- sap netweaver application server javaSQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP...CVE-2017-77178.8 High
- sap sso authentication librarySAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial...CVE-2017-7696EPSS 36.2%7.5 High
- sap business intelligence platformSQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows...CVE-2016-68189.8 Critical
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors...CVE-2016-61439.8 Critical
- sap trexA code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The...CVE-2017-76919.8 Critical
- sap netweaverStack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a...CVE-2016-103119.8 Critical
- sap sql anywhereBuffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and...CVE-2016-103104.9 Medium
- sap netweaver application server javaThe SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to...CVE-2016-103046.5 Medium
- sap gui for windowsSAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions...CVE-2017-69509.8 Critical
- sap businessobjects financial consolidationCross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial...CVE-2017-60614.7 Medium
- sap kernelThe SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a...CVE-2017-59977.5 High
- sap saplpdSAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability ...CVE-2016-10079Public exploit7.5 High
- sap netweaverThe function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows...CVE-2017-53727.5 High
- sap hybrisHybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain...CVE-2016-68594.3 Medium
- sap hybrisCross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management...CVE-2016-68585.4 Medium
- sap hybrisCross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management...CVE-2016-68575.4 Medium
- sap hybrisCross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console...CVE-2016-68566.1 Medium
- sap solution managerWebdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information...CVE-2016-100057.5 High
- sap download managerSAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on...CVE-2016-36854.7 Medium
- sap download managerSAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data,...CVE-2016-36844.7 Medium
- sap netweaver, netweaver application server java +1 moreBC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML...CVE-2016-9563In KEVEPSS 24.2%6.5 Medium
- sap netweaver application server javaSAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer...CVE-2016-95627.5 High
- sap netweaverSAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as...CVE-2016-74373.3 Low
- sap sapcryptolibThe DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures,...CVE-2016-44076.5 Medium
- sap sapconsoleSAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by...CVE-2016-39467.8 High
- sap sld registrationSAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory...CVE-2016-36385.5 Medium
- sap netweaverSAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity ...CVE-2016-36357.5 High
- sap netweaverThe (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG...CVE-2016-74359.1 Critical
- sap netweaver, aba, basis +2 moreThe (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might...CVE-2016-45517.5 High
- sap trexThe NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS...CVE-2016-61465.3 Medium
- sap trexAn unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary...CVE-2016-61379.8 Critical
- sap hanaSAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit...CVE-2016-61427.5 High
- sap hana dbSAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology...CVE-2016-36394.3 Medium
- sap sapcar archive toolSAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain...CVE-2016-5847Public exploit5.8 Medium
- sap sapcarSAP SAPCAR does not check the return value of file operations when extracting files, which allows...CVE-2016-5845Public exploit5.5 Medium
- sap hanaThe multi-tenant database container feature in SAP HANA does not properly encrypt communications,...CVE-2016-61509.8 Critical
- sap hana sps09SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by...CVE-2016-61495.5 Medium
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process...CVE-2016-61487.5 High
- sap trexAn unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute...CVE-2016-61479.8 Critical
- sap hana dbThe SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for...CVE-2016-61455.3 Medium
- sap hanaThe SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for...CVE-2016-61448.1 High
- Show moreLoading…