Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap customer relationship management bbpcrm, customer relationship management s4crm, sap se customer relationship management (email management - bbpcrm) +1 more +3 moreSAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0,...CVE-2019-03685.4 Medium
- sap netweaver process integration, sap se netweaver process integration (b2b toolkit) +1 moreSAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform...CVE-2019-03674.3 Medium
- sap hanaThe administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute...CVE-2019-03576.7 Medium
- sap netweaver process integration, sap se netweaver process integration runtime workbench – messaging and sap xiaf +1 moreUnder certain conditions SAP NetWeaver Process Integration Runtime Workbench ? MESSAGING and...CVE-2019-03564.3 Medium
- sap kernel, sap se gui for java (bc-fes-jav), gui for windows (bc-fes-gui) +9 more +11 moreSAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2019-03657.5 High
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03644.3 Medium
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03637.1 High
- sap supplier relationship management, sap se supplier relationship management (master data management catalog) (srm mdm cat) +1 moreSAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before...CVE-2019-03616.1 Medium
- sap netweaver application server java, sap se netweaver as for java (web container)-engineapi, netweaver as for java (web container)-sap-jeecor +2 moreSAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30,...CVE-2019-03557.2 High
- sap business one clientUnder certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and...CVE-2019-03533.3 Low
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (cmc) +1 moreIn SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some...CVE-2019-03527.5 High
- sap advanced business application programming platform kernel, sap se kernel (kernel), kernel (krnl32nuc) +3 more +5 moreSAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7...CVE-2019-03497.2 High
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreA remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry)...CVE-2019-03518.8 High
- sap businessobjects business intelligence, sap se business objects business intelligence platform (web intelligence) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can...CVE-2019-03486.5 Medium
- sap businessobjects business intelligence, sap se business objects business intelligence platform (cmc) +1 moreUnencrypted communication error in SAP Business Objects Business Intelligence Platform (Central...CVE-2019-03466.5 Medium
- sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 moreA remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for...CVE-2019-03459.8 Critical
- sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 moreDue to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6...CVE-2019-0344In KEV9.8 Critical
- sap commerce cloud, sap se commerce cloud (mediaconversion extension) +1 moreSAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905,...CVE-2019-03438.8 High
- sap enable nowThe XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened...CVE-2019-03405.4 Medium
- sap enable nowThe session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If...CVE-2019-03418.8 High
- sap gatewayDuring an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header...CVE-2019-03385.3 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreWhen creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace),...CVE-2019-03345.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence) +1 moreIn some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence...CVE-2019-03336.5 Medium
- sap netweaver process integration, sap se netweaver process integration (java proxy runtime) +1 moreJava Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7...CVE-2019-03376.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (cmc) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management...CVE-2019-03356.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (info view) +1 moreSAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an...CVE-2019-03326.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreUnder certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace),...CVE-2019-03315.3 Medium
- sap se diagnostic agent (lm-service), sap diagnostics agent +1 moreThe OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic...CVE-2019-03309.1 Critical
- sap information stewardSAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs,...CVE-2019-03296.1 Medium
- sap netweaver process integration, sap se netweaver process integration abap tests (sap basis) +1 moreABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process...CVE-2019-03287.2 High
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...CVE-2019-03277.2 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform - bi workspace (enterprise) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2...CVE-2019-03266.1 Medium
- sap erp hcm, sap se erp hcm (sap hrces) +1 moreSAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report...CVE-2019-03254.2 Medium
- sap commerce cloud, sap se commerce cloud (ex sap hybris commerce) (hy com) +1 moreSAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6...CVE-2019-03227.5 High
- sap se abap server and abap platform (sap basis), sap netweaver application server abap, netweaver as abap +2 moreABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode...CVE-2019-03216.1 Medium
- sap gateway, ui5 +1 moreThe SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is...CVE-2019-03197.5 High
- sap se netweaver application server for java (startup framework), sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions...CVE-2019-03185.3 Medium
- sap openui5, sap se sapui5 +1 moreSAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not...CVE-2019-02816.1 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7...CVE-2019-03164.8 Medium
- sap businessobjects, sap se businessobjects business intelligence platform (administration console) +1 moreSAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3,...CVE-2019-03036.1 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xipck) +1 more +3 moreUnder certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration ...CVE-2019-03157.5 High
- sap inventory manager, work manager +1 moreSAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an...CVE-2019-03145.5 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSeveral web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11,...CVE-2019-03125.3 Medium
- sap se r/3 enterprise application, sap r\/3 enterprise +1 moreAutomotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605,...CVE-2019-03116.1 Medium
- sap e-commerce, sap se e-commerce (business-to-consumer application) +1 moreAn authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7...CVE-2019-03086.8 Medium
- sap solution manager, sap se solution manager(diagnostics agent) +1 moreDiagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user...CVE-2019-03072.4 Low
- sap hana extended application services, sap se hana extended application services (advanced model) +1 moreSAP HANA Extended Application Services (advanced model), version 1, allows authenticated low...CVE-2019-03064.3 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr and sap xitool) +1 moreJava Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and...CVE-2019-03054.3 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreFTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2019-03049.8 Critical
- sap identity management, sap se identity management (rest interface) +1 moreUnder certain conditions, it is possible to request the modification of role or privilege...CVE-2019-03018.8 High
- Show moreLoading…