Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap knowledge warehouseA security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31...CVE-2021-42063Public exploitEPSS 23.4%6.1 Medium
- sap saf-t frameworkSAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path...CVE-2021-442327.7 High
- sap se netweaver as abap, sap netweaver application server abap +1 moreTwo methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730,...CVE-2021-442356.7 Medium
- sap access control, sap se grc access control +1 moreSAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary...CVE-2021-442338.8 High
- sap abap platform, netweaver application server abap, sap se abap server & abap platform (translation tools) +2 moreInternally used text extraction reports allow an attacker to inject code that can be executed by...CVE-2021-442319.8 Critical
- sap se erp hcm portugal, sap erp human capital management +1 moreSAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the...CVE-2021-420624.3 Medium
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...CVE-2021-405044.9 Medium
- sap gui for windowsAn information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7...CVE-2021-405037.8 High
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...CVE-2021-405028.8 High
- sap abap platform kernelSAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary...CVE-2021-405018.1 High
- sap cloud sdk, cloud-sdk-js +1 morePossibility to elevate privileges or get unauthorized access to dataCVE-2021-41251Fix available5.9 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (crystal reports) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows...CVE-2021-405007.5 High
- sap successfactors mobile, sap se successfactors mobile application (for android devices) +1 moreA vulnerability has been identified in SAP SuccessFactors Mobile Application for Android -...CVE-2021-404985.5 Medium
- sap netweaverSAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs,...CVE-2021-381836.1 Medium
- sap netweaver application server abap, sap se netweaver application server for abap (sap cloud print manager and sapsprint) +1 moreClient-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application...CVE-2021-404999.8 Critical
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752...CVE-2021-404964.3 Medium
- sap business oneSAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to...CVE-2021-381809.8 Critical
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreThe software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702...CVE-2021-381788.8 High
- sap businessobjects analysis, sap se businessobjects analysis, (edition for olap) +1 moreSAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to...CVE-2021-404975.3 Medium
- sap netweaver application server abap, netweaver abap, sap se netweaver as abap and abap platform +2 moreThere are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP...CVE-2021-404955.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752,...CVE-2021-381817.5 High
- sap business oneDebug function of Admin UI of SAP Business One Integration is enabled by default. This allows...CVE-2021-381794.9 Medium
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...CVE-2021-337046.3 Medium
- sap dmis, s4core, sapscore +2 more +4 moreDMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700,...CVE-2021-337019.1 Critical
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...CVE-2021-336989.9 Critical
- sap netweaver portal, sap se netweaver enterprise portal +1 moreThe SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...CVE-2021-337058.1 High
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...CVE-2021-337007.0 High
- sap cloud connectorSAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing...CVE-2021-336945.9 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (notification service) +1 moreNWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2021-336916.9 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a...CVE-2021-336935.7 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (sapui5) +1 moreUnder certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions -...CVE-2021-336974.7 Medium
- sap cloud connectorPotentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted...CVE-2021-336956.8 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file...CVE-2021-336925.2 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (crystal report) +1 moreSAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does...CVE-2021-336965.4 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (component build service) +1 moreServer-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver...CVE-2021-33690Public exploitEPSS 69.1%9.9 Critical
- sap 3d visual enterprise viewerWhen a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise...CVE-2021-381744.3 Medium
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...CVE-2021-336884.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...CVE-2021-336865.3 Medium
- sap contact centerUnder certain conditions, SAP Contact Center - version 700, does not sufficiently encode user...CVE-2021-336746.5 Medium
- sap commoncryptolibSAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference...CVE-2021-381777.5 High
- sap business oneSAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system...CVE-2021-336856.5 Medium
- sap contact centerDue to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an...CVE-2021-336729.6 Critical
- sap analysis for microsoft officeSAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read...CVE-2021-381756.5 Medium
- sap netweaver, sap se netweaver (visual composer 7.0 rt) +1 moreSAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an...CVE-2021-38163In KEVPublic exploitEPSS 36.9%9.9 Critical
- sap netweaver application server java, sap se netweaver application server java (jms connector service) +1 moreSAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31,...CVE-2021-3753510.0 Critical
- sap contact centerUnder certain conditions, SAP Contact Center - version 700, does not sufficiently encode user...CVE-2021-336756.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (bi workspace) +1 moreThe SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the...CVE-2021-336795.4 Medium
- sap landscape transformation, landscape transformation replication server, s\/4hana +4 more +6 moreDue to improper input sanitization, an authenticated user with certain specific privileges can...CVE-2021-381769.9 Critical
- sap erp financial accounting, sap se erp financial accounting (rfopenposting fr) +1 moreSAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605,...CVE-2021-381645.4 Medium
- sap contact centerUnder certain conditions, SAP Contact Center - version 700,does not sufficiently encode user...CVE-2021-336738.3 High
- Show moreLoading…