Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap business oneSAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to...CVE-2021-381809.8 Critical
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreThe software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702...CVE-2021-381788.8 High
- sap netweaver application server abap, netweaver abap, sap se netweaver as abap and abap platform +2 moreThere are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP...CVE-2021-404955.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752,...CVE-2021-381817.5 High
- sap business oneDebug function of Admin UI of SAP Business One Integration is enabled by default. This allows...CVE-2021-381794.9 Medium
- sap business oneThe Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke...CVE-2021-337046.3 Medium
- sap business oneSAP Business One, version - 10.0, allows an attacker with business authorization to upload any...CVE-2021-336989.9 Critical
- sap netweaver portal, sap se netweaver enterprise portal +1 moreThe SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...CVE-2021-337058.1 High
- sap business oneSAP Business One, version - 10.0, allows a local attacker with access to the victim's browser...CVE-2021-337007.0 High
- sap cloud connectorSAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing...CVE-2021-336945.9 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a...CVE-2021-336935.7 Medium
- sap cloud connectorPotentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted...CVE-2021-336956.8 Medium
- sap cloud connectorSAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file...CVE-2021-336925.2 Medium
- sap business oneSAP Business One allows an attacker with business privileges to execute crafted database queries,...CVE-2021-336884.3 Medium
- sap business oneUnder certain conditions, SAP Business One version - 10.0, allows an unauthorized attacker to get...CVE-2021-336865.3 Medium
- sap commoncryptolibSAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference...CVE-2021-381777.5 High
- sap business oneSAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system...CVE-2021-336856.5 Medium
- sap landscape transformation, landscape transformation replication server, s\/4hana +4 more +6 moreDue to improper input sanitization, an authenticated user with certain specific privileges can...CVE-2021-381769.9 Critical
- sap business oneSAP Business One version - 10, due to improper input validation, allows an authenticated User to...CVE-2021-375324.3 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2021-214894.8 Medium
- sap netweaver enterprise portalUnder certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7...CVE-2021-337028.3 High
- sap internet communication manager, web dispatcher, sap se web dispatcher and internet communication manager +2 moreSAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT,...CVE-2021-336835.4 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2021-336845.3 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784,...CVE-2021-336776.5 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752,...CVE-2021-276109.0 Critical
- sap netweaver application server abap, sap se netweaver application server abap (applications based on sap gui for html) +1 moreSAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions -...CVE-2021-336655.4 Medium
- sap commerce cloudWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...CVE-2021-336664.7 Medium
- sap business oneUnder certain conditions, the installation of SAP Business One, version - 10.0, discloses...CVE-2021-336626.7 Medium
- sap gui for windowsIn specific situations SAP GUI for Windows, versions - 7.60, 7.70 forwards a user to specific...CVE-2021-276123.4 Low
- sap commerceSAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain...CVE-2021-276029.9 Critical
- sap solution managerUnder certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker...CVE-2021-214838.2 High
- sap hana databaseSAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who...CVE-2021-214746.5 Medium
- sap commerceSAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required...CVE-2021-21477EPSS 29.8%9.9 Critical
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...CVE-2021-214455.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated...CVE-2021-214475.4 Medium
- sap se gui for windows, sap graphical user interface +1 moreSAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for...CVE-2021-214485.3 Medium
- sap hana databaseSAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML...CVE-2020-268344.2 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreProcess Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...CVE-2020-268266.5 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreSAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...CVE-2020-268209.1 Critical
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...CVE-2020-268095.3 Medium
- sap netweaver application server javaSAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an...CVE-2020-63654.7 Medium
- sap business planning and consolidationSAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200,...CVE-2020-63685.4 Medium
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that...CVE-2020-63634.6 Medium
- sap netweaver application server javaSAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50...CVE-2020-63196.1 Medium
- sap commerce cloudSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,...CVE-2020-62725.4 Medium
- sap commerceSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL...CVE-2020-63026.4 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions -...CVE-2020-63125.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreXvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on...CVE-2020-62948.5 High
- sap commerceSAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under...CVE-2020-62648.6 High
- sap se netweaver as java, sap netweaver application server java +1 moreStandalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...CVE-2020-62636.9 Medium
- Show moreLoading…