Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap e-commerce, sap se e-commerce (sap-crmjav, sap-crmweb, sap-shrweb, sap-shrjav, sap-crmapp, sap-shrapp) +1 moreSAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled...CVE-2019-02986.1 Medium
- sap solution manager system, sap se solution manager system (st-pi) +1 moreRead of RFC destination does not always perform necessary authorization checks, resulting in...CVE-2019-02936.5 Medium
- sap solution managerUnder certain conditions Solution Manager, version 7.2, allows an attacker to access information...CVE-2019-02915.5 Medium
- sap businessobjects, sap se businessobjects business intelligence platform +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP),...CVE-2019-02897.1 High
- sap businessobjects, sap se businessobjects business intelligence platform (central management server) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Central Management...CVE-2019-02877.6 High
- sap treasury and risk management, sap se enterprise financial services (s4core), treasury and risk management(ea-finserv) +2 moreSAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8...CVE-2019-02808.8 High
- sap crystal reports, sap se crystal reports for visual studio +1 moreThe .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010)...CVE-2019-0285Public exploit9.8 Critical
- sap hanaSLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML...CVE-2019-02846.0 Medium
- sap netweaver process integration, sap se netweaver process integration (adapter engine) +1 moreSAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7...CVE-2019-02837.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...CVE-2019-02825.3 Medium
- sap se basis, sap business application software integrated solution +1 moreABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and...CVE-2019-02798.8 High
- sap netweaver process integration, sap se netweaver process integration (messaging system) +1 moreUnder certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration ...CVE-2019-02784.3 Medium
- sap hana extended application servicesSAP HANA extended application services, version 1, advanced does not sufficiently validate an XML...CVE-2019-02776.5 Medium
- sap banking services from sap, s\/4hana financial products subledger, sap se banking services from sap 9.0 (fsappl) +1 more +3 moreBanking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger ...CVE-2019-02768.8 High
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...CVE-2019-02755.4 Medium
- sap mobile platform sdkSAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service,...CVE-2019-02747.5 High
- sap kernel, sap se abap server, sap advanced business application programming platform +2 more +4 moreABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an...CVE-2019-02716.5 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for...CVE-2019-02708.8 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does...CVE-2019-02695.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (cmc module) +1 moreSAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30,...CVE-2019-02688.1 High
- sap manufacturing integration and intelligenceSAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator...CVE-2019-02678.8 High
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...CVE-2019-02667.5 High
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreSLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a...CVE-2019-02654.9 Medium
- sap businessobjects bi platform, sap se webintelligence bilaunchpad (enterprise) +1 moreSAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user...CVE-2019-02625.4 Medium
- sap se hana extended application services, sap landscape management +1 moreUnder certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced)...CVE-2019-02619.8 Critical
- sap businessobjects, sap se businessobjects business intelligence platform servers (enterprise) +1 moreSAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any...CVE-2019-02599.8 Critical
- sap disclosure managementSAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an...CVE-2019-02588.8 High
- sap netweaver as abap, netweaver application server abap, sap se abap platform(sap basis) +2 moreCustomizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02,...CVE-2019-02578.8 High
- sap business one, sap se business one mobile android app +1 moreUnder certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker...CVE-2019-02565.5 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl64nuc, advanced business application programming platform krnl64uc +2 moreSAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75,...CVE-2019-02558.1 High
- sap disclosure managementSAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user...CVE-2019-02545.4 Medium
- sap businessobjects, sap se businessobjects business intelligence platform (fiori launchpad) +1 moreThe Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently...CVE-2019-02516.1 Medium
- sap landscape management, sap se landscape management(vcm) +1 moreUnder certain conditions SAP Landscape Management (VCM 3.0) allows an attacker to access...CVE-2019-02497.5 High
- sap basis, netweaver, sap se gateway of abap application server(sap basis) +1 more +3 moreUnder certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7...CVE-2019-02485.9 Medium
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be...CVE-2019-02479.8 Critical
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for...CVE-2019-02469.8 Critical
- sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 moreSAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8...CVE-2019-02455.4 Medium
- sap s4fnd, sapscore, customer relationship management webclient ui +3 more +5 moreSAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8...CVE-2019-02445.4 Medium
- sap bw\/4hana, sap se bw/4hana (dw4core) +1 moreUnder some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 ...CVE-2019-02438.8 High
- sap agentry sdk, work manager, sap se work and inventory manager (agentry sdk) +2 moreSAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent...CVE-2019-02417.5 High
- sap se business objects mobile for android, sap businessobjects mobile +1 moreSAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide...CVE-2019-02407.5 High
- sap hybris, sap se commerce (ex. sap hybris commerce) +1 moreSAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently...CVE-2019-02386.1 Medium
- sap financial consolidation cube designer, financial consolidation cube designer bobj eades, sap se financial consolidation cube designer (bobj eades) +2 moreA security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8...CVE-2018-24997.5 High
- sap ea-finserv, s4core, sapscore +5 more +7 moreSAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03;...CVE-2018-24848.8 High
- sap hybris, commerce (sap hybris commerce) +1 moreSAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site...CVE-2018-25056.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreSAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host...CVE-2018-25046.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access...CVE-2018-25037.4 High
- sap business one on hana, business one service layer (b1 on hana) +1 moreTRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site...CVE-2018-25026.1 Medium
- sap mobile secure, mobile secure for android +1 moreUnder certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711)...CVE-2018-25004.7 Medium
- sap hanaThe security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these...CVE-2018-24972.7 Low
- Show moreLoading…