Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated...CVE-2020-62475.9 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access...CVE-2020-62456.5 Medium
- sap master data governance \(s4core\), master data governance \(s4fnd\), master data governance \(sap bs fnd\) +3 more +5 moreThe use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101,...CVE-2020-62497.7 High
- sap adaptive server enterprise, sap se adaptive server enterprise (xp server on windows platform) +1 moreUnder certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform),...CVE-2020-62438.0 High
- sap netweaver application server abap, sap se netweaver as abap (web dynpro abap) (sap basis), netweaver as abap (web dynpro abap) (sap ui) +2 moreSAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700,...CVE-2020-62405.3 Medium
- sap erp, sap se s/4 hana, sap s\/4hana +2 moreEgypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and...CVE-2020-62125.4 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application sbspext phtmlb) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701,...CVE-2020-62136.1 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an...CVE-2020-62116.1 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application it05) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730,...CVE-2020-62176.1 Medium
- sap netweaver knowledge management and collaboration \(kmc-cm\), netweaver knowledge management and collaboration \(kmc-wpc\), sap se netweaver (knowledge management) (kmc-cm) +1 more +3 moreSAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50...CVE-2020-62259.1 Critical
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext...CVE-2020-61956.4 Medium
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...CVE-2020-62389.3 Critical
- sap adaptive extensions, landscape management +1 moreSAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an...CVE-2020-62367.2 High
- sap host agentSAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation...CVE-2020-62347.2 High
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...CVE-2020-62325.3 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2,...CVE-2020-62377.5 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check...CVE-2020-62358.6 High
- sap banking services from sap, s\/4hana financial products subledger, sap se s/4 hana (financial products subledger and banking services) (fsappl) +1 more +3 moreSAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500...CVE-2020-62334.3 Medium
- sap orientdbSAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions...CVE-2020-62309.1 Critical
- sap se business objects business intelligence platform (web intelligence html interface), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4...CVE-2020-62265.4 Medium
- sap se business objects business intelligence platform (web intelligence html interface), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4...CVE-2020-62315.4 Medium
- sap business clientSAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could...CVE-2020-62285.3 Medium
- sap se netweaver as java (http service), sap netweaver application server java +1 moreSAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows...CVE-2020-62244.5 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages application crm bsp frame) +1 moreSAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702,...CVE-2020-62296.1 Medium
- sap se business objects business intelligence platform (cms / auditing issues), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows...CVE-2020-62275.3 Medium
- sap se crystal reports for vs, business objects business intelligence platform (crystalreports webform viewer), sap businessobjects business intelligence platform +1 more +3 moreSAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1...CVE-2020-62199.1 Critical
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4...CVE-2020-62225.4 Medium
- sap se business objects business intelligence platform (bi launchpad), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not...CVE-2020-62166.1 Medium
- sap businessobjects business intelligence platformWeb Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions...CVE-2020-62215.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreThe open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...CVE-2020-62236.1 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreAdmin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4...CVE-2020-62185.0 Medium
- sap se s/4hana (financial products subledger), sap s\/4hana +1 moreSAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object...CVE-2020-62144.7 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application it00) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730,...CVE-2020-62156.1 Medium
- sap fiori launchpadSAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and...CVE-2020-62104.7 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an...CVE-2020-62097.2 High
- sap crystal reports, sap se business objects business intelligence platform (crystal reports) +1 moreSAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows...CVE-2020-62087.5 High
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication...CVE-2020-6207In KEVPublic exploitEPSS 98.2%10.0 Critical
- sap cloud platform integration, sap se cloud platform integration for data services +1 moreSAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected...CVE-2020-62064.7 Medium
- sap netweaver as abap business server pages, sap se netweaver application server abap (smart forms) - sap basis +1 moreSAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02,...CVE-2020-62056.1 Medium
- sap treasury and risk management \(ea-finserv\), treasury and risk management \(s4core\), sap se treasury and risk management (transaction management) (ea-finserv) +1 more +3 moreThe selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV...CVE-2020-62044.3 Medium
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreSAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...CVE-2020-62039.1 Critical
- sap netweaver application server java, sap se netweaver application server java (user management engine) +1 moreSAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30,...CVE-2020-62025.5 Medium
- sap commerce cloud, sap se commerce cloud (testweb extension) +1 moreThe SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently...CVE-2020-62016.1 Medium
- sap commerce cloud, sap se commerce cloud (smartedit extension) +1 moreThe SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client...CVE-2020-62005.4 Medium
- sap erp, sap se erp (eappglo), erp (sap fin) +1 more +3 moreThe view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN...CVE-2020-61995.4 Medium
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from...CVE-2020-61989.8 Critical
- sap enable nowSAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The...CVE-2020-61973.8 Low
- sap businessobjects mobile, sap se businessobjects mobile (mobilebiservice) +1 moreSAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate...CVE-2020-61967.5 High
- sap enable nowSAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be...CVE-2020-61785.4 Medium
- sap netweaver application servernwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks...CVE-2015-79686.4 Medium
- Show moreLoading…