Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap biller directCross-Site Scripting (XSS) vulnerability in SAP Biller DirectCVE-2023-424796.1 Medium
- sap business objects business intelligence platform, sap se business objects bi platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-424787.5 High
- sap businessobjects web intelligenceCross Site Scripting vulnerability in SAP BusinessObjects Web IntelligenceCVE-2023-424766.8 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreInformation Disclosure in NetWeaver AS Java LogonCVE-2023-424805.3 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2023-413665.3 Medium
- sap business oneImproper Access Control vulnerability in SAP Business One product installationCVE-2023-314039.6 Critical
- sap se enable now, sap enable now enable now consump del, enable now wpb manager +2 more +4 moreClickjacking vulnerability in SAP Enable NowCVE-2023-369206.1 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreServer-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)CVE-2023-424776.5 Medium
- sap s\/4hana, sap se s/4hana core +1 moreInformation Disclosure Vulnerability in Statutory ReportingCVE-2023-424754.3 Medium
- sap businessobjects web intelligenceCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web IntelligenceCVE-2023-424746.8 Medium
- sap se s/4hana (manage withholding tax items), sap s\/4hana +1 moreMissing Authorization Check In S/4HANA (Manage Withholding Tax Items)CVE-2023-424735.4 Medium
- sap business one, sap se business one (b1i) +1 moreInformation Disclosure vulnerability in SAP Business One (B1i)CVE-2023-413654.3 Medium
- sap powerdesigner, sap se powerdesigner client +1 moreMissing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 importCVE-2023-403106.5 Medium
- sap privilegesPrivileges Memory Corruption (Out-of-bound write)CVE-2023-403076.3 Medium
- sap commoncryptolib, content server, extended application services and runtime +8 more +10 moreMissing Authorization check in SAP CommonCryptoLibCVE-2023-403099.8 Critical
- sap powerdesigner, sap se powerdesigner client +1 moreCode Injection vulnerability in SAP PowerDesigner ClientCVE-2023-406216.3 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (promotion management) +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)CVE-2023-406229.9 Critical
- sap businessobjects, sap se businessobjects suite (installer) +1 moreArbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)CVE-2023-406236.2 Medium
- sap se netweaver as abap (applications based on unified rendering), sap netweaver application server abap +1 moreCode Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)CVE-2023-406245.5 Medium
- sap s4core, sap se manage purchase contracts app +1 moreMissing Authorization check in SAP Manage Purchase Contracts AppCVE-2023-406255.4 Medium
- sap netweaver, sap se netweaver (guided procedures) +1 moreMissing Authentication check in SAP NetWeaver (Guided Procedures)CVE-2023-413675.3 Medium
- sap s\/4 hana, sap se s4 hana abap (manage checkbook apps) +1 moreInsecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)CVE-2023-413682.7 Low
- sap se s/4hana (create single payment application), sap s\/4 hana +1 moreExternal Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)CVE-2023-413693.5 Low
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreInsufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)CVE-2023-424728.7 High
- sap commoncryptolib, content server, extended application services and runtime +8 more +10 moreMemory Corruption vulnerability in SAP CommonCryptoLibCVE-2023-403087.5 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (version management system) +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)CVE-2023-374895.3 Medium
- sap se s/4hana (manage catalog items and cross-catalog search), sap s\/4hana +1 moreURL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)CVE-2023-403066.1 Medium
- sap se cla assistant, sap contributor license agreement assistant +1 moreMissing Authorization check allows certain operations on CLA Assistant dataCVE-2023-394388.1 High
- sap se commerce (occ api), sap commerce cloud, commerce hycom +2 moreInformation Disclosure vulnerability in SAP Commerce (OCC API)CVE-2023-374865.9 Medium
- sap businessobjects business intelligenceInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-394404.4 Medium
- sap commerce cloud, sap se commerce, sap commerce hycom +2 moreSAP Commerce accepts empty passphrases.CVE-2023-394398.8 High
- sap business oneCross-Site Scripting (XSS) vulnerability in SAP Business OneCVE-2023-394377.6 High
- sap supplier relationship managementInformation Disclosure in SAP Supplier Relationship ManagementCVE-2023-394365.8 Medium
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreMissing Authorization check in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2023-374924.9 Medium
- sap message serverImproper Authorization check vulnerability in SAP Message ServerCVE-2023-374917.5 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence (installer) +1 moreBinary hijack in SAP BusinessObjects Business Intelligence (Installer)CVE-2023-374907.6 High
- sap netweaver process integrationCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process IntegrationCVE-2023-374886.1 Medium
- sap business one, sap se business one (service layer) +1 moreSecurity misconfiguration vulnerability in SAP Business One (Service Layer)CVE-2023-374875.3 Medium
- sap powerdesignerInformation Disclosure Vulnerabilities in SAP PowerDesignerCVE-2023-374845.3 Medium
- sap powerdesignerImproper Access Control Vulnerabilities in SAP PowerDesignerCVE-2023-374839.8 Critical
- sap host agentInformation disclosure vulnerability in SAP Host AgentCVE-2023-369263.7 Low
- sap powerdesignerCode Injection vulnerability in SAP PowerDesignerCVE-2023-369237.8 High
- sap business one, sap se business one (b1i layer) +1 moreSQL Injection vulnerability in SAP Business One B1i LayerCVE-2023-339937.1 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreUnauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)CVE-2023-369257.2 High
- sap erp defense forces and public securityLog Injection vulnerability in SAP ERP Defense Forces and Public SecurityCVE-2023-369244.9 Medium
- sap se ecc and sap s/4hana (is-oil), sap netweaver +1 moreOS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)CVE-2023-369229.1 Critical
- sap solution manager, sap se solution manager (diagnostic agent) +1 moreHeader Injection in SAP Solution Manager (Diagnostic Agent)CVE-2023-369217.2 High
- sap enable nowInformation Disclosure in SAP Enable NowCVE-2023-369195.3 Medium
- sap enable nowCross-Site Scripting vulnerability in SAP Enable NowCVE-2023-369186.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 morePassword Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformCVE-2023-369175.9 Medium
- Show moreLoading…