Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request...CVE-2018-24395.9 Medium
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of...CVE-2018-24387.5 High
- sap internet graphics server, internet graphics server (igs) +1 moreThe SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to...CVE-2018-24379.1 Critical
- sap r/3 enterprise retail, r\/3 enterprise retail +1 moreExecuting transaction WRCK in SAP R/3 Enterprise Retail (EHP6) does not perform necessary...CVE-2018-24368.8 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2018-24356.1 Medium
- sap netweaver, user interface technology, netweaver (ui infra) +3 more +5 moreA content spoofing vulnerability in the following components allows to render html pages...CVE-2018-24344.3 Medium
- sap gateway, kernel +1 moreSAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7...CVE-2018-24337.5 High
- sap businessobjects business intelligence, businessobjects business intelligence (bi launchpad and central management console) +1 moreSAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions...CVE-2018-24325.4 Medium
- sap businessobjects business intelligence, businessobjects business intelligence suite +1 moreSAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently...CVE-2018-24316.1 Medium
- sap businessobjects business intelligence, crystal reports, businessobjects business intelligence suite +2 moreSAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports ...CVE-2018-24278.8 High
- sap infrastructure, ui, sap se ui for sap netweaver 7.00 +2 moreUnder certain conditions SAP UI5 Handler allows an attacker to access information which would...CVE-2018-24285.3 Medium
- sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an...CVE-2018-24258.4 High
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...CVE-2018-24249.8 Critical
- sap internet transaction serverSAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via...CVE-2018-11415Public exploit6.1 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows...CVE-2018-24235.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...CVE-2018-24225.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an...CVE-2018-24215.3 Medium
- sap internet graphics server, sap se internet graphics server (igs) +1 moreSAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload...CVE-2018-24206.5 Medium
- sap ea-finserv, s4core, sapscore +3 more +5 moreSAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05,...CVE-2018-24193.7 Low
- sap maxdb odbc driverSAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can...CVE-2018-24185.5 Medium
- sap identity managementUnder certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an...CVE-2018-24175.3 Medium
- sap identity managementSAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an...CVE-2018-24165.4 Medium
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 moreSAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7...CVE-2018-24154.7 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...CVE-2018-24135.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...CVE-2018-24123.8 Low
- sap business oneSAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs,...CVE-2018-24105.4 Medium
- sap cloud platform, sap se cloud platform connector +1 moreImproper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud...CVE-2018-24096.3 Medium
- sap se business objects, sap businessobjects +1 moreImproper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI...CVE-2018-24087.3 High
- sap crystal reports server, sap se crystal reports server, oem edition +1 moreUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server,...CVE-2018-24065.3 Medium
- sap solution managerSAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a...CVE-2018-24055.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format...CVE-2018-24044.3 Medium
- sap disclosure managementUnder certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information...CVE-2018-24035.4 Medium
- sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP...CVE-2018-24027.6 High
- sap process monitoring infrastructureCross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7...CVE-2018-23996.1 Medium
- sap business clientUnder certain conditions SAP Business Client 6.5 allows an attacker to access information which...CVE-2018-23986.7 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreIn SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central...CVE-2018-23975.4 Medium
- sap se crm, sap customer relationship management (crm), customer relationship management +2 moreSAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation...CVE-2018-2380In KEVPublic exploitEPSS 28.9%6.6 Medium
- sap netweaver system landscape directory, sap se netweaver system landscape directory, lm-core +1 moreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform...CVE-2018-23689.8 Critical
- sap business application software integrated solution, sap se basis (abap file interface) +1 moreABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7...CVE-2018-23678.8 High
- sap netweaver portal, sap se netweaver portal webdynpro runtime +1 moreSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-23656.1 Medium
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...CVE-2018-23966.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user may retrieve information on SAP Internet Graphic Server...CVE-2018-23958.8 High
- sap internet graphics serverUnder certain conditions an unauthenticated malicious user can prevent legitimate users from...CVE-2018-23946.5 Medium
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...CVE-2018-2393EPSS 15.5%7.5 High
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...CVE-2018-2392Public exploitEPSS 41.1%7.5 High
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...CVE-2018-23916.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...CVE-2018-23906.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user can inject log files of SAP Internet Graphics Server ...CVE-2018-23895.7 Medium
- sap internet graphics serverStored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7...CVE-2018-23886.1 Medium
- sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow...CVE-2018-23876.5 Medium
- Show moreLoading…