Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap business application software integrated solution, basis (abap platform), basis (as abap of sap netweaver) +2 moreNecessary authorization checks for an authenticated user, resulting in escalation of privileges,...CVE-2018-24948.0 High
- sap netweaver application server java, netweaver application server (java library) +1 moreSAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents...CVE-2018-24927.1 High
- sap marketing sapscore, marketing uicuan, marketing (sapscore) +1 more +3 moreSAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode...CVE-2018-24865.4 Medium
- sap fiori clientWhen opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client...CVE-2018-24917.8 High
- sap fiori clientThe broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori...CVE-2018-24907.8 High
- sap fiori clientLocally, without any permission, an arbitrary android application could delete the SSO...CVE-2018-24897.8 High
- sap fiori clientIt is possible for a malware application installed on an Android device to send local push...CVE-2018-24887.8 High
- sap disclosure managementSAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file...CVE-2018-24878.3 High
- sap fiori clientIt is possible for a malicious application or malware to execute JavaScript in a SAP Fiori...CVE-2018-24857.7 High
- sap businessobjects business intelligence, businessobjects business intelligence platform +1 moreHTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4...CVE-2018-24834.3 Medium
- sap mobile secure, mobile secure android application +1 moreSAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60...CVE-2018-24827.5 High
- sap aba, advanced business application programming +1 moreIn some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7...CVE-2018-24817.2 High
- sap businessobjects business intelligence platform (biworkspace), businessobjects bi platform +1 moreSAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not...CVE-2018-24796.1 Medium
- sap basis, basis (trex / bwa installation) +1 moreAn attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA...CVE-2018-24787.2 High
- sap knowledge management (xmlforms) in sap netweaver, netweaver +1 moreKnowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not...CVE-2018-24778.8 High
- sap netweaver, netweaver (forums) +1 moreDue to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an...CVE-2018-24766.1 Medium
- sap businessobjects business intelligence, businessobjects business intelligence platform server +1 moreSAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web...CVE-2018-24736.5 Medium
- gardener, sap project “gardener” +1 moreFollowing the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster...CVE-2018-24758.5 High
- sap fiori, fiori 1.0 for sap erp hcm (approve leave request, version 2) +1 moreSAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker...CVE-2018-24746.5 Medium
- sap businessobjects business intelligence platform, businessobjects bi platform +1 moreSAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client)...CVE-2018-24726.1 Medium
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows...CVE-2018-24717.5 High
- sap netweaver, netweaver application server for abap +1 moreIn SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to...CVE-2018-24706.1 Medium
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an...CVE-2018-24697.5 High
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7...CVE-2018-24687.5 High
- sap businessobjects bi platform, businessobjects bi platform servers (software development kit) +1 moreIn the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2,...CVE-2018-24675.3 Medium
- sap data servicesIn Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not...CVE-2018-24665.4 Medium
- sap hanaSAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not...CVE-2018-24657.5 High
- sap webdynpro, netweaver +1 moreSAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-24646.1 Medium
- sap hybris, hybris commerce +1 moreThe Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server...CVE-2018-24638.6 High
- sap netweaver, netweaver bi +1 moreIn certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7...CVE-2018-24628.8 High
- sap gbx01 hr, people profile +1 moreMissing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an...CVE-2018-24618.8 High
- sap business one, business one android application +1 moreSAP Business One Android application, version 1.2, does not verify the certificate properly for...CVE-2018-24605.9 Medium
- sap mobile platformUsers of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData...CVE-2018-24597.5 High
- sap business oneUnder certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection...CVE-2018-24587.5 High
- sap adaptive server enterpriseUnder certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged...CVE-2018-24576.5 Medium
- sap enterprise financial servicesSAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business...CVE-2018-24558.8 High
- sap enterprise financial servicesSAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business...CVE-2018-24548.8 High
- sap netweaver as java, netweaver application server java +1 moreThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...CVE-2018-24526.1 Medium
- sap hana extended application servicesXS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS...CVE-2018-24516.6 Medium
- sap maxdb, maxdb (livecache) +1 moreSAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges...CVE-2018-24507.2 High
- sap supplier relationship management master data management catalog, supplier relationship management mdm catalog +1 moreSAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does...CVE-2018-24498.6 High
- sap srm-mdm catalog, supplier relationship management mdm catalog +1 moreUnder certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality...CVE-2018-24485.3 Medium
- sap businessobjects business intelligenceSAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an...CVE-2018-24476.5 Medium
- sap businessobjects business intelligenceAdmin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an...CVE-2018-24467.5 High
- sap businessobjects business intelligence, businessobjects business intelligence platform +1 moreAdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to...CVE-2018-24459.6 Critical
- sap businessobjects financial consolidationSAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode...CVE-2018-24446.1 Medium
- sap businessobjects business intelligence, internet graphics server +1 moreIn SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web...CVE-2018-24428.8 High
- sap change and transport system (abap), kernel +1 moreUnder certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP...CVE-2018-24415.5 Medium
- insteon sap, sap business planning and consolidation +1 moreAn exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC...CVE-2017-163496.4 Medium
- sap dynamic authorization management, dynamic authorization management (dam) by nextlabs (java policy controller versions) +1 moreUnder certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy...CVE-2018-24404.4 Medium
- Show moreLoading…