Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap businessobjects business intelligence platform, business objects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)CVE-2023-00154.6 Medium
- sap netweaver abap server and abap platform, netweaver application server abap, netweaver application server abap kernel +2 more +4 moreCapture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00149.0 Critical
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00136.1 Medium
- sap host agent (windows), host agent +1 moreLocal Privilege Escalation in SAP Host Agent (Windows)CVE-2023-00126.4 Medium
- sap solution manager (enterprise search), solution manager +1 moreIn SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker...CVE-2022-412756.1 Medium
- sap disclosure managementSAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain...CVE-2022-412746.5 Medium
- sap sourcing, sourcing and sap contract lifecycle management, contract lifecycle manager +2 moreDue to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management -...CVE-2022-412734.3 Medium
- sap netweaver process integrationAn unauthenticated attacker over the network can attach to an open interface exposed through JNDI...CVE-2022-41272Public exploit9.9 Critical
- sap netweaver process integrationAn unauthenticated user can attach to an open interface exposed through JNDI by the Messaging...CVE-2022-412719.4 Critical
- sap business planning and consolidationIn some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750,...CVE-2022-412688.5 High
- sap business objects business intelligence platform, businessobjects business intelligence platform +1 moreSAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user...CVE-2022-412679.9 Critical
- sap commerce webservices 2.0 (swagger ui), commerce webservices 2.0 +1 moreDue to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions...CVE-2022-412668.0 High
- sap basisDue to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751...CVE-2022-412648.8 High
- sap business objects business intelligence platform (web intelligence), business objects business intelligence platform +1 moreDue to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web...CVE-2022-412634.3 Medium
- sap netweaver as for java (http provider service), netweaver application server java +1 moreDue to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7...CVE-2022-412626.1 Medium
- sap solution manager (diagnostic agent), solution manager +1 moreSAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on...CVE-2022-412616.0 Medium
- sap business objects business intelligence platform, business objects platform (monitoring db) +1 moreUnder certain conditions, an attacker authenticated as a CMS administrator and with high...CVE-2022-315966.0 Medium
- sap financial consolidationSAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input...CVE-2022-412606.1 Medium
- sap sql anywhereSAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users...CVE-2022-412596.5 Medium
- sap financial consolidationDue to insufficient input validation, SAP Financial Consolidation - version 1010, allows an...CVE-2022-412586.5 Medium
- sap se netweaver abap server and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...CVE-2022-412154.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412148.7 High
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412124.9 Medium
- sap 3d visual enterprise author, 3d visual enterprise viewer +1 moreDue to lack of proper memory management, when a victim opens manipulated file received from...CVE-2022-412117.0 High
- sap financial consolidationDue to insufficient input validation, SAP Financial Consolidation - version 1010, allows an...CVE-2022-412085.4 Medium
- sap biller directSAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When...CVE-2022-412076.1 Medium
- sap gui, sap se gui for windows +1 moreSAP GUI allows an authenticated attacker to execute scripts in the local network. On successful...CVE-2022-412055.5 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (central management console and bi launchpad) +1 moreIn some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad)...CVE-2022-412039.9 Critical
- sap customer data cloud, sap se customer data cloud (gigya) +1 moreSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number...CVE-2022-412105.2 Medium
- sap customer data cloud, sap se customer data cloud (gigya) +1 moreSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method...CVE-2022-412095.2 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (analysis for olap) +1 moreSAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430,...CVE-2022-412065.4 Medium
- sap commerceAn attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,...CVE-2022-412048.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (...CVE-2022-412027.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Right Hemisphere...CVE-2022-412017.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Scalable Vector...CVE-2022-412007.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Open Inventor File (...CVE-2022-411997.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp,...CVE-2022-411987.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl,...CVE-2022-411977.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl,...CVE-2022-411967.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange...CVE-2022-411957.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Encapsulated...CVE-2022-411947.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Encapsulated Post...CVE-2022-411937.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt...CVE-2022-411927.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (...CVE-2022-411917.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf,...CVE-2022-411907.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg,...CVE-2022-411897.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj,...CVE-2022-411887.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj...CVE-2022-411877.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens manipulated Computer Graphics...CVE-2022-411867.8 High
- sap 3d visual enterprise authorDue to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (...CVE-2022-411857.8 High
- Show moreLoading…