Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (...CVE-2022-411847.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Windows Cursor File (...CVE-2022-411835.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Parasolid Part and...CVE-2022-411825.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Portable Document Format...CVE-2022-411815.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Portable Document...CVE-2022-411807.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (...CVE-2022-411797.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (...CVE-2022-411785.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly...CVE-2022-411777.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf,...CVE-2022-411765.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (...CVE-2022-411757.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Right Hemisphere...CVE-2022-411745.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf,...CVE-2022-411735.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf,...CVE-2022-411727.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model,...CVE-2022-411715.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model,...CVE-2022-411707.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart,...CVE-2022-411695.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart,...CVE-2022-411687.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg,...CVE-2022-411677.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj,...CVE-2022-411665.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj...CVE-2022-398087.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (...CVE-2022-398075.5 Medium
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (...CVE-2022-398067.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Computer Graphics...CVE-2022-398057.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (...CVE-2022-398047.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly...CVE-2022-398037.8 High
- sap manufacturing executionSAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit...CVE-2022-39802Public exploit7.5 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi launchpad) +1 moreSAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack...CVE-2022-398006.1 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (admintools/query builder) +1 moreUnder certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which...CVE-2022-390156.5 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence platform (program objects) +1 moreUnder certain conditions an authenticated attacker can get access to OS credentials. Getting...CVE-2022-390137.6 High
- sap iq, sql anywhere +1 moreSAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage...CVE-2022-352999.8 Critical
- sap enable nowThe application SAP Enable Now does not sufficiently encode user-controlled inputs over the...CVE-2022-352975.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (version management system) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...CVE-2022-352964.9 Medium
- sap data services, sap se data services management console +1 moreSAP Data Services Management allows an attacker to copy the data from a request and echoed into...CVE-2022-352266.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (commentary db) +1 moreUnder certain conditions an attacker authenticated as a CMS administrator access the BOE...CVE-2022-322445.2 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (cmc) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence Platform Central Management...CVE-2022-390145.3 Medium
- sap access control, sap se grc access control emergency access management +1 moreSAP GRC Access control Emergency Access Management allows an authenticated attacker to access a...CVE-2022-398017.5 High
- sap netweaver application server abap, sap se netweaver as abap (sap gui for html within the fiori launchpad) +1 moreAn attacker with no prior authentication could craft and send malicious script to SAP GUI for...CVE-2022-397996.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreSAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user...CVE-2022-352986.1 Medium
- sap netweaver application server abap, sap se netweaver as abap +1 moreAn attacker with basic business user privileges could craft and upload a malicious file to SAP...CVE-2022-352945.4 Medium
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...CVE-2022-352927.8 High
- sap host agent, sap se host agent (saposcol) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...CVE-2022-352954.9 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (open document) +1 moreSAP BusinessObjects Business Intelligence Platform (Open Document) - versions 430, 430, allows an...CVE-2022-322458.2 High
- sap enable now managerDue to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain...CVE-2022-352939.1 Critical
- sap authenticator, sap se authenticator for android +1 moreUnder certain conditions SAP Authenticator for Android allows an attacker to access information...CVE-2022-352907.5 High
- sap successfactors mobile, sap successfactors mobile application for android & ios devices +1 morePrivilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)CVE-2022-352918.1 High
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...CVE-2022-322497.5 High
- sap enterprise portalSAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently...CVE-2022-352246.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreSAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the...CVE-2022-352288.8 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-352256.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (wpc) +1 moreA vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently...CVE-2022-352276.1 Medium
- Show moreLoading…