Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (bi workspace) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible...CVE-2022-282166.1 Medium
- sap businessobjects business intelligence platformWhen a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform -...CVE-2022-28213Public exploitEPSS 12.5%8.1 High
- sap 3d visual enterprise viewerWhen a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources...CVE-2022-276546.5 Medium
- sap sql anywhere, sap se sql anywhere server +1 moreSAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users...CVE-2022-276706.5 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate...CVE-2022-225416.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in...CVE-2022-276556.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from...CVE-2022-261066.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources...CVE-2022-261086.5 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-261056.1 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from...CVE-2022-261096.5 Medium
- sap businessobjects business intelligence platformUnder certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management...CVE-2022-276677.5 High
- sap 3d visual enterprise viewerWhen a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted...CVE-2022-261076.5 Medium
- sap innovation managementUnder certain conditions, SAP Innovation management - version 2.0, allows an attacker to access...CVE-2022-276587.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode...CVE-2022-243976.1 Medium
- sap financial consolidationSAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for...CVE-2022-261045.3 Medium
- sap se netweaver (real time messaging framework), sap netweaver application server java +1 moreUnder certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an...CVE-2022-261035.3 Medium
- sap fiori launchpadFiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs,...CVE-2022-261016.1 Medium
- sap simple diagnostics agentSimple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access...CVE-2022-225477.5 High
- sap focused run, sap se focused run (real user monitoring) +1 moreThe SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not...CVE-2022-243996.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-243956.1 Medium
- sap sapcarSAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a...CVE-2022-261009.8 Critical
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreDue to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...CVE-2022-261025.4 Medium
- sap simple diagnostics agent, sap se focused run (simple diagnostics agent) +1 moreThe Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any...CVE-2022-243967.8 High
- sap business objects business intelligence platformUnder certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430,...CVE-2022-243986.5 Medium
- sap solution manager, sap se solution manager (diagnostics root cause analysis tools) +1 moreSolution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator...CVE-2022-225449.1 Critical
- sap se business objects web intelligence (bi launchpad), sap businessobjects web intelligence +1 moreDue to improper HTML encoding in input control summary, an authorized attacker can execute XSS...CVE-2022-225465.4 Medium
- sap se netweaver application server abap and abap platform, sap netweaver abap +1 moreA high privileged user who has access to transaction SM59 can read connection details stored with...CVE-2022-225454.9 Medium
- sap se netweaver application server for abap (kernel) and abap platform (kernel), sap netweaver abap, netweaver as abap +2 moreSAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7...CVE-2022-225437.5 High
- sap s\/4hana, sap se s/4hana (supplier factsheet and enterprise search for business partner, supplier and customer) +1 moreS/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business...CVE-2022-225426.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources...CVE-2022-225396.5 Medium
- sap se netweaver as abap (workplace server), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753,...CVE-2022-225407.5 High
- sap content server, netweaver application server abap, web dispatcher +2 more +4 moreSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP...CVE-2022-22536In KEVPublic exploitEPSS 97.9%10.0 Critical
- sap 3d visual enterprise viewerWhen a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from...CVE-2022-225386.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted...CVE-2022-225376.5 Medium
- sap erp human capital management, sap se erp hcm (portugal) +1 moreSAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks...CVE-2022-225356.5 Medium
- sap netweaver, sap se netweaver (abap and java application servers) +1 moreDue to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to...CVE-2022-225346.1 Medium
- sap netweaver application server javaDue to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22...CVE-2022-225337.5 High
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...CVE-2022-225329.8 Critical
- sap adaptive server enterpriseSAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system...CVE-2022-225287.8 High
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...CVE-2021-420674.3 Medium
- sap enterprise threat detectionSAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled...CVE-2022-225296.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...CVE-2022-225318.1 High
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...CVE-2021-442345.5 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...CVE-2022-225308.1 High
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not...CVE-2021-420615.4 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual...CVE-2021-420683.3 Low
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in...CVE-2021-420703.3 Low
- sap commerceIf configured to use an Oracle database and if a query is created using the flexible search java...CVE-2021-420649.8 Critical
- sap 3d visual enterprise viewerWhen a user opens manipulated Tagged Image File Format (.tif) file received from untrusted...CVE-2021-420693.3 Low
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...CVE-2021-420664.4 Medium
- Show moreLoading…