Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap biller directSAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When...CVE-2022-412076.1 Medium
- sap gui, sap se gui for windows +1 moreSAP GUI allows an authenticated attacker to execute scripts in the local network. On successful...CVE-2022-412055.5 Medium
- sap commerceAn attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,...CVE-2022-412048.8 High
- sap enable nowThe application SAP Enable Now does not sufficiently encode user-controlled inputs over the...CVE-2022-352975.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (version management system) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...CVE-2022-352964.9 Medium
- sap data services, sap se data services management console +1 moreSAP Data Services Management allows an attacker to copy the data from a request and echoed into...CVE-2022-352266.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreSAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user...CVE-2022-352986.1 Medium
- sap business oneIn SAP Business One application when a service is created, the executable path contains spaces...CVE-2022-352927.8 High
- sap business oneUnder special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker...CVE-2022-322497.5 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreSAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the...CVE-2022-352288.8 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-352256.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-351726.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not...CVE-2022-351706.1 Medium
- sap business oneDue to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker...CVE-2022-351687.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-322476.1 Medium
- sap business oneSAP Business One client - version 10.0 allows an attacker with low privileges, to inject code...CVE-2022-315938.8 High
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420...CVE-2022-296196.5 Medium
- sap erp financial accounting, erp localization for cee countries, s\/4hana +3 more +5 moreDue to improper authorization check, business users who are using Israeli File from SHAAM program...CVE-2022-315896.5 Medium
- sap business objects business intelligence platformBI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...CVE-2020-62204.4 Medium
- sap se cla assistant, sap contributor license agreement assistant +1 moreDue to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.CVE-2022-296176.5 Medium
- sap se host agent, netweaver and abap platform, sap netweaver as abap kernel +2 more +4 moreSAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in...CVE-2022-296167.5 High
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...CVE-2022-296118.8 High
- sap netweaver application server abapSAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...CVE-2022-296105.4 Medium
- sap host agentUnder certain conditions, the SAP Host Agent logfile shows information which would otherwise be...CVE-2022-287745.5 Medium
- sap netweaver abap, sap se netweaver abap server and abap platform +1 moreSAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated...CVE-2022-282154.7 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreBy overlong input values an attacker may force overwrite of the internal program stack in SAP Web...CVE-2022-287727.5 High
- sap businessobjects business intelligence platformA CSRF token visible in the URL may possibly lead to information disclosure vulnerability.CVE-2022-276716.5 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...CVE-2022-287737.5 High
- sap businessobjects business intelligence platformWhen a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform -...CVE-2022-28213Public exploitEPSS 12.5%8.1 High
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate...CVE-2022-225416.5 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-261056.1 Medium
- sap businessobjects business intelligence platformUnder certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management...CVE-2022-276677.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode...CVE-2022-243976.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-243956.1 Medium
- sap sapcarSAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a...CVE-2022-261009.8 Critical
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreDue to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...CVE-2022-261025.4 Medium
- sap business objects business intelligence platformUnder certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430,...CVE-2022-243986.5 Medium
- sap se netweaver application server abap and abap platform, sap netweaver abap +1 moreA high privileged user who has access to transaction SM59 can read connection details stored with...CVE-2022-225454.9 Medium
- sap netweaver application server javaDue to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22...CVE-2022-225337.5 High
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...CVE-2022-225329.8 Critical
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...CVE-2021-420674.3 Medium
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...CVE-2021-442345.5 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not...CVE-2021-420615.4 Medium
- sap commerceIf configured to use an Oracle database and if a query is created using the flexible search java...CVE-2021-420649.8 Critical
- sap business oneSAP Business One - version 10.0, allows an admin user to view DB password in plain text over the...CVE-2021-420664.4 Medium
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...CVE-2021-405044.9 Medium
- sap gui for windowsAn information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7...CVE-2021-405037.8 High
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...CVE-2021-405028.8 High
- sap netweaverSAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs,...CVE-2021-381836.1 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752...CVE-2021-404964.3 Medium
- Show moreLoading…