Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap web dispatcherSAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC ...CVE-2021-381628.9 High
- sap business oneSAP Business One version - 10, due to improper input validation, allows an authenticated User to...CVE-2021-375324.3 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2021-214894.8 Medium
- sap netweaver knowledge management xml formsSAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50,...CVE-2021-375319.9 Critical
- sap business clientWhen an attacker manages to get access to the local memory, or the memory dump of a victim, for...CVE-2021-381506.1 Medium
- sap infraboxDue to improper input validation in InfraBox, logs can be modified by an authenticated user.CVE-2021-337064.3 Medium
- sap netweaver enterprise portalUnder certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7...CVE-2021-337028.3 High
- sap netweaver enterprise portal, sap se netweaver enterprise portal (application extensions) +1 moreUnder certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does...CVE-2021-337038.3 High
- sap netweaver knowledge management, sap se netweaver (knowledge management) +1 moreSAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary...CVE-2021-337076.1 Medium
- sap fiori client, sap se fiori client native mobile for android +1 moreTask Hijacking is a vulnerability that affects the applications running on Android devices due to...CVE-2021-33699Public exploit7.6 High
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7...CVE-2018-178616.1 Medium
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7...CVE-2018-178656.1 Medium
- sap j2ee engine** UNSUPPORTED WHEN ASSIGNED ** A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7...CVE-2018-178626.1 Medium
- sap businessobjects edgeSAP BusinessObjects Edge 4.1 allows remote attackers to obtain the...CVE-2014-93209.8 Critical
- sap mobile platformSAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other...CVE-2015-77315.5 Medium
- sap businessobjects edgeThe File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote...CVE-2015-20747.5 High
- sap businessobjects edgeThe File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote...CVE-2015-20737.5 High
- sap lumira serverSAP Lumira Server version 2.4 does not sufficiently encode user controlled inputs, resulting in...CVE-2021-336825.4 Medium
- sap se netweaver as java (enterprise portal), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals...CVE-2021-336874.5 Medium
- sap internet communication manager, web dispatcher, sap se web dispatcher and internet communication manager +2 moreSAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT,...CVE-2021-336835.4 Medium
- sap netweaver application server java, sap se netweaver as java (administrator applications) +1 moreWhen user with insufficient privileges tries to access any application in SAP NetWeaver...CVE-2021-336893.5 Low
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2021-336845.3 Medium
- sap se netweaver as abap (reconciliation framework), sap netweaver application server abap +1 moreA function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702,...CVE-2021-336786.5 Medium
- sap netweaver application server java, sap se netweaver as for java (http service) +1 moreSAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7...CVE-2021-336707.5 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...CVE-2021-336814.3 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784,...CVE-2021-336776.5 Medium
- sap se crm, sap customer relationship management +1 moreA missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged...CVE-2021-336766.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...CVE-2021-336804.3 Medium
- sap netweaver guided procedures, sap se netweaver guided procedures (administration workset) +1 moreSAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40...CVE-2021-336717.6 High
- sap se business objects web intelligence (bi launchpad), sap businessobjects web intelligence +1 moreUnder certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420,...CVE-2021-336674.3 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752,...CVE-2021-276109.0 Critical
- sap mobile sdk certificate providerUnder certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file storage. For a successful exploitation user interaction from an…CVE-2021-336697.8 High
- sap netweaver application server abap, sap se netweaver application server abap (applications based on sap gui for html) +1 moreSAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions -...CVE-2021-336655.4 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC -...CVE-2021-336635.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...CVE-2021-336594.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...CVE-2021-336614.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap (applications based on web dynpro abap) +1 moreSAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI ...CVE-2021-336645.4 Medium
- sap commerce cloudWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...CVE-2021-336664.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received...CVE-2021-336604.3 Medium
- sap business oneUnder certain conditions, the installation of SAP Business One, version - 10.0, discloses...CVE-2021-336626.7 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...CVE-2021-276424.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received...CVE-2021-276404.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...CVE-2021-276434.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received...CVE-2021-276414.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received...CVE-2021-276384.3 Medium
- sap se netweaver as for java, sap netweaver application server for java +1 moreSAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker...CVE-2021-276359.0 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received...CVE-2021-276394.3 Medium
- sap enable now, sap se enable now (sap workforce performance builder - manager) +1 moreUnder certain conditions SAP Enable Now (SAP Workforce Performance Builder - Manager), versions -...CVE-2021-276375.9 Medium
- sap netweaver application server for java, sap se netweaver as for java (useradmin) +1 moreInformation Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server...CVE-2021-276215.5 Medium
- sap manufacturing executionSAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP...CVE-2021-276155.4 Medium
- Show moreLoading…