Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap netweaver, s\/4hana, sap se netweaver (sap basis) +1 more +3 moreUnder certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP...CVE-2020-61855.4 Medium
- sap abap platform, netweaver, sap se abap platform (sap basis) +1 more +3 moreUnder some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702...CVE-2020-61815.8 Medium
- sap host agentSAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username...CVE-2020-61867.5 High
- sap host agentSAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to...CVE-2020-61835.3 Medium
- sap netweaver, s\/4hana, sap se automated note search tool (sap basis) +2 moreUnder certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP...CVE-2020-61846.1 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...CVE-2020-61917.2 High
- sap erp, s\/4 hana, sap se erp (sap appl) +2 more +4 moreVAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN...CVE-2020-61886.3 Medium
- sap se netweaver as java (heap dump application), sap netweaver application server java +1 moreCertain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7...CVE-2020-61905.8 Medium
- sap se business objects business intelligence platform (cmc), sap businessobjects business intelligence platform +1 moreCertain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4...CVE-2020-61895.3 Medium
- sap se netweaver (guided procedures), sap netweaver guided procedures +1 moreSAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-61874.9 Medium
- sap mobile platformSAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an...CVE-2020-61774.3 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...CVE-2020-61927.2 High
- sap se netweaver (knowledge management ice service), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an...CVE-2020-61936.1 Medium
- sap netweaverSAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the...CVE-2011-15179.8 Critical
- sap netweaverA Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in...CVE-2013-15937.5 High
- sap netweaverA Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics()...CVE-2013-1592Public exploitEPSS 24.4%9.8 Critical
- sap basis, sap se automated note search tool (sap basis) +1 moreAutomated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7...CVE-2020-63074.3 Medium
- sap leasing, sap se leasing (ea appl), leasing (sap appl) +2 moreMissing authorization check in a transaction within SAP Leasing (update provided in SAP_APPL 6.18...CVE-2020-63062.7 Low
- sap process integration, sap se process integration - rest adapter (sap xiaf) +1 morePI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31, 7.40, 7.50) does...CVE-2020-63056.1 Medium
- sap netweaver internet communication manager \(kernel\), netweaver internet communication manager \(krnl32nuc\), netweaver internet communication manager \(krnl32uc\) +7 more +9 moreImproper input validation in SAP NetWeaver Internet Communication Manager (update provided in...CVE-2020-63045.9 Medium
- sap disclosure managementSAP Disclosure Management, before version 10.1, does not validate user input properly in specific...CVE-2020-63035.4 Medium
- sap enterprise extension financial services, treasury and risk management \(s4core\), sap se treasury and risk management (ea-finserv) +1 more +3 moreTransaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1...CVE-2019-03848.8 High
- sap enterprise extension financial services, treasury and risk management \(s4core\), sap se treasury and risk management (ea-finserv) +1 more +3 moreTransaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1...CVE-2019-03838.8 High
- sap enable nowSAP Enable Now, before version 1911, leaks information about the existence of a particular user...CVE-2019-04057.5 High
- sap enable nowSAP Enable Now, before version 1911, leaks information about network configuration in the server...CVE-2019-04047.5 High
- sap enable nowSAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files,...CVE-2019-04039.8 Critical
- sap adaptive server enterpriseSAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes...CVE-2019-04024.4 Medium
- sap portfolio and project management, sap se portfolio and project management (cprxrpm), portfolio and project management (eppm) +1 more +3 moreSAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM...CVE-2019-03996.5 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (monitoring application) +1 moreDue to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform ...CVE-2019-03988.8 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (fiori bi launchpad) +1 moreSAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2,...CVE-2019-03955.4 Medium
- sap erp sales, s4hana sales, sap se s4hana sales (s4core) +1 more +3 moreOrder processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16,...CVE-2019-03866.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected...CVE-2019-03967.1 High
- sap ui, sap se ui 700 +1 moreSAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700...CVE-2019-03885.3 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap diagnostics agent, sap se data hub (dh foundation) +1 moreUnder certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker...CVE-2019-03904.3 Medium
- sap quality management, sap se quality management (s4core) +1 moreAn SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01,...CVE-2019-03934.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence) +1 moreA Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform...CVE-2019-03825.4 Medium
- sap netweaver application server java, sap se netweaver application server java (j2ee-framework) +1 moreAn administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in...CVE-2019-03898.8 High
- sap enable nowSAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs,...CVE-2019-03856.5 Medium
- sap hana databaseSAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed...CVE-2019-03507.5 High
- sap landscape management, sap se landscape management enterprise edition +1 moreUnder certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows...CVE-2019-03804.9 Medium
- sap dynamic tier, iq, sql anywhere +1 more +3 moreA binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP...CVE-2019-03815.5 Medium
- sap process integration, sap se process integration, business-to-business add-on +1 moreIn SAP NetWeaver Process Integration (AS2 Adapter), before versions 1.0 and 2.0, the attacker is...CVE-2019-03795.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03785.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03775.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03765.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03755.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03745.4 Medium
- sap financial consolidationDue to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1,...CVE-2019-03706.5 Medium
- sap financial consolidationSAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user...CVE-2019-03695.4 Medium
- Show moreLoading…