Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap hcm fiori app my forms (fiori 2.0), hcm fiori app my forms +1 moreMissing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)CVE-2023-19034.3 Medium
- sap authenticator, authenticator for android +1 moreInformation Disclosure vulnerability in SAP Authenticator for AndroidCVE-2023-278956.1 Medium
- sap solution manager and abap managed systems, solution manager +1 moreArbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)CVE-2023-278938.8 High
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-275018.7 High
- sap netweaver as for abap and abap platform (saprsbro program), netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-275009.6 Critical
- sap host agent (saposcol), host agent +1 moreMemory Corruption vulnerability in SAP Host Agent (SAPOSCOL)CVE-2023-274987.2 High
- sap businessobjects business intelligence platform (web services), businessobjects business intelligence +1 moreSensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platformCVE-2023-278945.0 Medium
- sap businessobjects business intelligence, businessobjects business intelligence platform (web services) +1 moreServer Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platformCVE-2023-278966.5 Medium
- sap businessobjects business intelligence platform (web services), businessobjects business intelligence platform +1 moreServer Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platformCVE-2023-272716.5 Medium
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-272706.5 Medium
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-272699.6 Critical
- sap netweaver as java (object analyzing service), netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)CVE-2023-272685.3 Medium
- sap netweaver (sap enterprise portal), netweaver enterprise portal +1 moreXML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)CVE-2023-264616.8 Medium
- sap netweaver application server for java, netweaver as for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Cache Management Service)CVE-2023-264605.3 Medium
- opentext content serverCross-Site Scripting (XSS) vulnerability in SAP Content ServerCVE-2023-264576.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-256186.5 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreServer Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-264597.4 High
- sap business objects business intelligence platform, business objects (adaptive job server) +1 moreOS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)CVE-2023-256179.0 Critical
- sap business objects business intelligence platform (cmc), business objects business intelligence platform +1 moreCode Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)CVE-2023-256169.9 Critical
- sap abap platform, abap platform +1 moreSQL Injection vulnerability in SAP ABAP PlatformCVE-2023-256156.8 Medium
- sap netweaver application server java, netweaver as java for classload service +1 moreImproper Access Control in SAP NetWeaver AS Java (Classload Service)CVE-2023-245265.3 Medium
- sap netweaver as for java, netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS for JavaCVE-2023-238579.9 Critical
- sap netweaverCross-Site Scripting (XSS) vulnerability in SAP NetWeaverCVE-2023-00216.1 Medium
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreSAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751,...CVE-2023-256146.1 Medium
- sap businessobjects business intelligence platform (cmc), businessobjects business intelligence platform +1 moreSAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an...CVE-2023-245308.4 High
- sap netweaver as abap (business server pages application), netweaver as abap business server pages +1 moreDue to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702,...CVE-2023-245296.1 Medium
- sap fiori, fiori apps 1.0 for travel management in sap erp (my travel requests) +1 moreSAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an...CVE-2023-245286.5 Medium
- sap s4fnd, crm (webclient ui), customer relationship management webclient ui +2 moreSAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently...CVE-2023-245254.3 Medium
- sap s/4 hana (map treasury correspondence format data), s\/4hana +1 moreSAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization...CVE-2023-245246.5 Medium
- sap host agent, host agent service +1 moreAn attacker authenticated as a non-admin user with local access to a server port assigned to the...CVE-2023-245238.8 High
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions...CVE-2023-245226.1 Medium
- sap netweaver as abap (bsp framework), netweaver as abap business server pages +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701...CVE-2023-245216.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238606.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238596.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 moreDue to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...CVE-2023-238586.1 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence (web intelligence ui) +1 moreIn SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430,...CVE-2023-238564.3 Medium
- sap solution managerSAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a...CVE-2023-238556.5 Medium
- sap netweaver as abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740,...CVE-2023-238543.8 Low
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreAn unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform -...CVE-2023-238536.1 Medium
- sap solution managerSAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user...CVE-2023-238526.1 Medium
- sap business planning and consolidationSAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business...CVE-2023-238515.4 Medium
- sap solution manager (bsp application), solution manager +1 moreSAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...CVE-2023-00256.5 Medium
- sap solution manager (bsp application), solution manager +1 moreSAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...CVE-2023-00246.5 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated...CVE-2023-00208.5 High
- sap se grc (process control), sap grc process control +1 moreIn SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700,...CVE-2023-00196.5 Medium
- sap bank account management (manage banks), bank account management +1 moreInformation Disclosure in SAP Bank Account Management (Manage Banks)CVE-2023-00234.5 Medium
- sap businessobjects business intelligence platform (analysis edition for olap), businessobjects business intelligence platform +1 moreCode Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)CVE-2023-00229.9 Critical
- sap businessobjects business intelligence platform (central management console), businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)CVE-2023-001810.0 Critical
- sap netweaver as for java, netweaver application server for java +1 moreImproper access control in SAP NetWeaver AS for JavaCVE-2023-0017EPSS 15.7%9.4 Critical
- sap business planning and consolidation, bpc ms 10.0 +1 moreSQL Injection vulnerability in SAP Business Planning and Consolidation MSCVE-2023-00169.9 Critical
- Show moreLoading…