Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows...CVE-2020-62694.3 Medium
- sap commerce, sap se commerce (data hub), sap commerce data hub +2 moreSAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808...CVE-2020-62659.8 Critical
- sap identity managementSAP Identity Management, version 8.0, does not perform necessary authorization checks for an...CVE-2020-62584.3 Medium
- sap master data governanceSAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows...CVE-2020-62565.4 Medium
- sap businessobjects business intelligence platformUnder certain conditions or error scenarios SAP Business Objects Business Intelligence Platform,...CVE-2020-62515.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated...CVE-2020-62475.9 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access...CVE-2020-62456.5 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an...CVE-2020-62116.1 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext...CVE-2020-61956.4 Medium
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...CVE-2020-62389.3 Critical
- sap adaptive extensions, landscape management +1 moreSAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an...CVE-2020-62367.2 High
- sap host agentSAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation...CVE-2020-62347.2 High
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...CVE-2020-62325.3 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2,...CVE-2020-62377.5 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check...CVE-2020-62358.6 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4...CVE-2020-62225.4 Medium
- sap businessobjects business intelligence platformWeb Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions...CVE-2020-62215.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreThe open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...CVE-2020-62236.1 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreAdmin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4...CVE-2020-62185.0 Medium
- sap fiori launchpadSAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and...CVE-2020-62104.7 Medium
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from...CVE-2020-61989.8 Critical
- sap enable nowSAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The...CVE-2020-61973.8 Low
- sap enable nowSAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be...CVE-2020-61785.4 Medium
- sap host agentSAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username...CVE-2020-61867.5 High
- sap host agentSAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to...CVE-2020-61835.3 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...CVE-2020-61917.2 High
- sap se netweaver (guided procedures), sap netweaver guided procedures +1 moreSAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-61874.9 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...CVE-2020-61927.2 High
- sap enable nowSAP Enable Now, before version 1911, leaks information about the existence of a particular user...CVE-2019-04057.5 High
- sap enable nowSAP Enable Now, before version 1911, leaks information about network configuration in the server...CVE-2019-04047.5 High
- sap enable nowSAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files,...CVE-2019-04039.8 Critical
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected...CVE-2019-03967.1 High
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence) +1 moreA Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform...CVE-2019-03825.4 Medium
- sap enable nowSAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs,...CVE-2019-03856.5 Medium
- sap hana databaseSAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed...CVE-2019-03507.5 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03785.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03775.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03765.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03755.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before...CVE-2019-03745.4 Medium
- sap enable nowThe XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened...CVE-2019-03405.4 Medium
- sap enable nowThe session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If...CVE-2019-03418.8 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence) +1 moreIn some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence...CVE-2019-03336.5 Medium
- sap openui5, sap se sapui5 +1 moreSAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not...CVE-2019-02816.1 Medium
- sap solution managerUnder certain conditions Solution Manager, version 7.2, allows an attacker to access information...CVE-2019-02915.5 Medium
- sap businessobjects, sap se businessobjects business intelligence platform +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP),...CVE-2019-02897.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...CVE-2019-02825.3 Medium
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be...CVE-2019-02479.8 Critical
- sap cloud connectorSAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for...CVE-2019-02469.8 Critical
- Show moreLoading…