Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-351726.1 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...CVE-2022-351715.5 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (lcm) +1 moreSAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker...CVE-2022-351696.0 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not...CVE-2022-351706.1 Medium
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...CVE-2022-351687.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-322476.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreDue to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101,...CVE-2022-322485.3 Medium
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...CVE-2022-315938.8 High
- sap businessobjects bw publisher service, sap se businessobjects (bw publisher service) +1 moreSAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an...CVE-2022-315917.8 High
- sap sapscore, sap se s/4hana, sap s\/4hana +2 moreWithin SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application...CVE-2022-315975.4 Medium
- sap business one license service apiDue to missing authentication check, SAP Business one License service API - version 10.0 allows...CVE-2022-287717.5 High
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420...CVE-2022-296196.5 Medium
- sap enterprise extension defense forces \& public security, sap se enterprise extension defense forces & public security (ea-dfps) +1 moreThe application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606,...CVE-2022-315924.3 Medium
- sap se business objects, sap business objects business intelligence platform +1 moreDue to insufficient input validation, SAP Business Objects - version 420, allows an authenticated...CVE-2022-315985.4 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (visual difference application) +1 moreSAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420...CVE-2022-322464.6 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from...CVE-2022-322435.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted...CVE-2022-322425.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from...CVE-2022-322415.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from...CVE-2022-322405.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in...CVE-2022-322395.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from...CVE-2022-322385.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from...CVE-2022-322375.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources...CVE-2022-322365.5 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted...CVE-2022-322355.5 Medium
- sap se financial consolidation, sap adaptive server enterprise +1 moreSAP Financial Consolidation - version 1010,?does not perform necessary authorization checks for...CVE-2022-315958.8 High
- sap adaptive server enterprise, sap se adaptive server enterprise (ase) +1 moreA highly privileged user can exploit SUID-root program to escalate his privileges to root on a...CVE-2022-315946.7 Medium
- sap powerdesigner proxy, sap se powerdesigner proxy 16.7 +1 moreSAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local...CVE-2022-315907.8 High
- sap erp financial accounting, erp localization for cee countries, s\/4hana +3 more +5 moreDue to improper authorization check, business users who are using Israeli File from SHAAM program...CVE-2022-315896.5 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (design time repository) +1 moreDue to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time...CVE-2022-296186.1 Medium
- sap netweaver developer studio, sap se netweaver developer studio (nwds) +1 moreSAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the...CVE-2022-296153.4 Low
- sap host agent, netweaver abap, sap se netweaver as abap, as java, abap platform and hana database +2 moreSAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP...CVE-2022-296145.0 Medium
- sap host agent, sap se netweaver, abap platform and sap host agent, sap netweaver abap +2 moreSAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7...CVE-2022-296124.3 Medium
- sap router, sap se netweaver and abap platform, sap netweaver as abap +2 more +4 moreDepending on the configuration of the route permission table in file 'saprouttab', it is possible...CVE-2022-276689.8 Critical
- sap netweaver, sap se netweaver (ep web page composer) +1 moreSome part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document...CVE-2022-282176.5 Medium
- sap business objects business intelligence platformBI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...CVE-2020-62204.4 Medium
- sap se cla assistant, sap contributor license agreement assistant +1 moreDue to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.CVE-2022-296176.5 Medium
- sap se host agent, netweaver and abap platform, sap netweaver as abap kernel +2 more +4 moreSAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in...CVE-2022-296167.5 High
- sap employee self service, sap se employee self service (fiori my leave request) +1 moreDue to insufficient input validation, SAP Employee Self Service allows an authenticated attacker...CVE-2022-296134.3 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...CVE-2022-296118.8 High
- sap netweaver application server abapSAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...CVE-2022-296105.4 Medium
- sap host agentUnder certain conditions, the SAP Host Agent logfile shows information which would otherwise be...CVE-2022-287745.5 Medium
- sap businessobjects, businessobjects business intelligence, sap se businessobjects enterprise (central management server) +2 moreDuring an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions...CVE-2022-282147.8 High
- sap netweaver as abap kernel, netweaver as abap krnl64uc, webdispatcher +2 more +4 moreThe Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does...CVE-2022-276566.1 Medium
- sap netweaver abap, sap se netweaver abap server and abap platform +1 moreSAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated...CVE-2022-282154.7 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreBy overlong input values an attacker may force overwrite of the internal program stack in SAP Web...CVE-2022-287727.5 High
- sap businessobjects business intelligence platformA CSRF token visible in the URL may possibly lead to information disclosure vulnerability.CVE-2022-276716.5 Medium
- sap netweaver application server for javaAn unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver...CVE-2022-276697.5 High
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...CVE-2022-287737.5 High
- sap focused run, sap se focused run (simple diagnostics agent) +1 moreA highly privileged remote attacker, can gain unauthorized access to display contents of...CVE-2022-276572.7 Low
- sap sapui5 library, sap se sapui5 (vbm library) +1 moreDue to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75,...CVE-2022-287706.1 Medium
- Show moreLoading…