Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreImproper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2023-358746.0 Medium
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)CVE-2023-358736.5 Medium
- sap netweaver process integration, sap se netweaver process integration (message display tool) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)CVE-2023-358726.5 Medium
- sap web dispatcherMemory Corruption vulnerability in SAP Web DispatcherCVE-2023-358717.7 High
- sap s4core, sap se s/4hana (manage journal entry template) +1 moreImproper Access Control in SAP S/4HANA (Manage Journal Entry Template)CVE-2023-358706.3 Medium
- sap business warehouse, sap se business warehouse and sap bw/4hana, sap bw\/4hana +2 moreMissing Authorization Check in SAP Business Warehouse and SAP BW/4HANACVE-2023-339924.5 Medium
- sap sql anywhereDenial of Service (DoS) vulnerability in SAP SQL AnywhereCVE-2023-339907.8 High
- sap se netweaver (bi cont add on), sap netweaver bi content +1 moreDirectory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)CVE-2023-339898.7 High
- sap enable nowCross-Site Scripting vulnerability in SAP Enable NowCVE-2023-339886.1 Medium
- sap web dispatcherRequest smuggling and request concatenation in SAP Web DispatcherCVE-2023-339878.6 High
- sap se netweaver as for java (log viewer), sap netweaver application server for java +1 moreLog Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)CVE-2023-314055.3 Medium
- sap ui, sap se ui5 variant management +1 moreStored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant ManagementCVE-2023-339918.2 High
- sap se crm abap (grantor management), sap customer relationship management abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)CVE-2023-339866.1 Medium
- sap netweaver, sap se netweaver enterprise portal +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalCVE-2023-339856.1 Medium
- sap netweaver, sap se netweaver (design time repository) +1 moreCross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)CVE-2023-339846.4 Medium
- sap master data synchronization, sap se master data synchronization (mds compare tool) +1 moreSQL Injection in Master Data Synchronization (MDS COMPARE TOOL)CVE-2023-321154.2 Medium
- sap netweaver, sap se netweaver (change and transport system) +1 moreDenial of Service in SAP NetWeaverCVE-2023-321142.7 Low
- sap digital manufacturing, plant connectivity +1 moreMissing Authentication in SAP Plant Connectivity and Production Connector for SAP DigitalCVE-2023-28277.9 High
- sap s4core, vendor master hierarchy +1 moreMissing Authorization Check in Vendor Master HierarchyCVE-2023-321122.8 Low
- sap gui for windowsInformation Disclosure vulnerability in SAP GUI for WindowsCVE-2023-321137.5 High
- sap se powerdesigner (proxy), sap powerdesigner proxy +1 moreMemory Corruption vulnerability in SAP PowerDesigner (Proxy)CVE-2023-321117.5 High
- sap business planning and consolidationCross-Site Scripting (XSS) vulnerability in SAP Business Planning and ConsolidationCVE-2023-314075.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-314066.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (central management service) +1 moreInformation Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)CVE-2023-314045.0 Medium
- sap se as netweaver java, sap netweaver application server for java +1 moreImproper access control during application start-up in SAP AS NetWeaver JAVA.CVE-2023-307448.2 High
- sap sapui5Improper Neutralization of Input in SAPUI5CVE-2023-307437.1 High
- sap se crm (webclient ui), sap customer relationship management s4fnd, customer relationship management webclient ui +2 moreCross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)CVE-2023-307426.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-307416.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-307406.3 Medium
- sap s4fnd, sapscore, sap se crm webclient ui +1 more +3 moreCross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UICVE-2023-291885.4 Medium
- sap businessobjects, sap se businessobjects platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects PlatformCVE-2023-287643.7 Low
- sap businessobjects business intelligence, sap se businessobjects intelligence platform +1 moreInformation Disclosure in SAP BusinessObjects Intelligence PlatformCVE-2023-287629.1 Critical
- sap crm (webclient ui), customer relationship management s4fnd, customer relationship management webclient ui +2 moreHTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)CVE-2023-291895.4 Medium
- sap sapsetup, sapsetup (software installation program) +1 moreDLL Hijacking vulnerability in SapSetup (Software Installation Program)CVE-2023-291876.7 Medium
- sap netweaver, netweaver (bi cont addon) +1 moreDirectory/Path Traversal vulnerability in SAP NetWeaver.CVE-2023-29186EPSS 24.8%8.7 High
- sap netweaver as for abap (business server pages), netweaver as abap business server pages +1 moreDenial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)CVE-2023-291855.3 Medium
- sap application interface framework (message monitoring), application interface +1 moreCode Injection vulnerability in SAP Application Interface Framework (Message Monitoring)CVE-2023-291123.7 Low
- sap application interface framework (odata service), application interface framework +1 moreInformation Disclosure vulnerability in SAP Application Interface Framework (ODATA service)CVE-2023-291113.1 Low
- sap application interface framework (message dashboard), application interface framework, basis +2 more +4 moreCode Injection vulnerability in SAP Application Interface Framework (Message Dashboard)CVE-2023-291103.7 Low
- sap application interface framework (message dashboard), application interface framework, basis +2 more +4 moreCode Injection vulnerability in SAP Application Interface Framework (Message Dashboard)CVE-2023-291094.4 Medium
- sap abap platform and sap web dispatcher, web dispatcher, abap platform kernel +2 moreIP filter vulnerability in ABAP Platform and SAP Web DispatcherCVE-2023-291085.0 Medium
- sap businessobjects business intelligence platform (promotion management), businessobjects business intelligence +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )CVE-2023-28765EPSS 14.9%9.8 Critical
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-287636.5 Medium
- sap netweaver enterprise portalMissing Authentication check in SAP NetWeaver Enterprise PortalCVE-2023-287616.5 Medium
- churchcrm crm, sap customer relationship management +1 moreCode Injection vulnerability in SAP CRMCVE-2023-278976.0 Medium
- sap se gui for html, sap netweaver, netweaver application server abap +2 moreCross-Site Scripting (XSS) vulnerability in SAP GUI for HTMLCVE-2023-274996.1 Medium
- sap diagnostics agent (eventlogservicecollector), diagnostics agent +1 moreMultiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)CVE-2023-2749710.0 Critical
- sap diagnostics agent (oscommand bridge), diagnostics agent +1 moreMultiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)CVE-2023-27267EPSS 14.2%9.0 Critical
- sap landscape managementInformation Disclosure vulnerability in SAP Landscape ManagementCVE-2023-264586.8 Medium
- sap netweaver as java for deploy serviceImproper Access Control in SAP NetWeaver AS Java for Deploy ServiceCVE-2023-245275.3 Medium
- Show moreLoading…