Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap business one, sap se business one (b1i layer) +1 moreSQL Injection vulnerability in SAP Business One B1i LayerCVE-2023-339937.1 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreUnauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)CVE-2023-369257.2 High
- sap erp defense forces and public securityLog Injection vulnerability in SAP ERP Defense Forces and Public SecurityCVE-2023-369244.9 Medium
- sap se ecc and sap s/4hana (is-oil), sap netweaver +1 moreOS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)CVE-2023-369229.1 Critical
- sap solution manager, sap se solution manager (diagnostic agent) +1 moreHeader Injection in SAP Solution Manager (Diagnostic Agent)CVE-2023-369217.2 High
- sap enable nowInformation Disclosure in SAP Enable NowCVE-2023-369195.3 Medium
- sap enable nowCross-Site Scripting vulnerability in SAP Enable NowCVE-2023-369186.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 morePassword Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformCVE-2023-369175.9 Medium
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreImproper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2023-358746.0 Medium
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)CVE-2023-358736.5 Medium
- sap netweaver process integration, sap se netweaver process integration (message display tool) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)CVE-2023-358726.5 Medium
- sap web dispatcherMemory Corruption vulnerability in SAP Web DispatcherCVE-2023-358717.7 High
- sap s4core, sap se s/4hana (manage journal entry template) +1 moreImproper Access Control in SAP S/4HANA (Manage Journal Entry Template)CVE-2023-358706.3 Medium
- sap business warehouse, sap se business warehouse and sap bw/4hana, sap bw\/4hana +2 moreMissing Authorization Check in SAP Business Warehouse and SAP BW/4HANACVE-2023-339924.5 Medium
- sap sql anywhereDenial of Service (DoS) vulnerability in SAP SQL AnywhereCVE-2023-339907.8 High
- sap se netweaver (bi cont add on), sap netweaver bi content +1 moreDirectory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)CVE-2023-339898.7 High
- sap enable nowCross-Site Scripting vulnerability in SAP Enable NowCVE-2023-339886.1 Medium
- sap web dispatcherRequest smuggling and request concatenation in SAP Web DispatcherCVE-2023-339878.6 High
- sap se netweaver as for java (log viewer), sap netweaver application server for java +1 moreLog Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)CVE-2023-314055.3 Medium
- sap ui, sap se ui5 variant management +1 moreStored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant ManagementCVE-2023-339918.2 High
- sap se crm abap (grantor management), sap customer relationship management abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)CVE-2023-339866.1 Medium
- sap netweaver, sap se netweaver enterprise portal +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalCVE-2023-339856.1 Medium
- sap netweaver, sap se netweaver (design time repository) +1 moreCross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)CVE-2023-339846.4 Medium
- sap master data synchronization, sap se master data synchronization (mds compare tool) +1 moreSQL Injection in Master Data Synchronization (MDS COMPARE TOOL)CVE-2023-321154.2 Medium
- sap netweaver, sap se netweaver (change and transport system) +1 moreDenial of Service in SAP NetWeaverCVE-2023-321142.7 Low
- sap digital manufacturing, plant connectivity +1 moreMissing Authentication in SAP Plant Connectivity and Production Connector for SAP DigitalCVE-2023-28277.9 High
- sap s4core, vendor master hierarchy +1 moreMissing Authorization Check in Vendor Master HierarchyCVE-2023-321122.8 Low
- sap gui for windowsInformation Disclosure vulnerability in SAP GUI for WindowsCVE-2023-321137.5 High
- sap se powerdesigner (proxy), sap powerdesigner proxy +1 moreMemory Corruption vulnerability in SAP PowerDesigner (Proxy)CVE-2023-321117.5 High
- sap business planning and consolidationCross-Site Scripting (XSS) vulnerability in SAP Business Planning and ConsolidationCVE-2023-314075.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-314066.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (central management service) +1 moreInformation Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)CVE-2023-314045.0 Medium
- sap se as netweaver java, sap netweaver application server for java +1 moreImproper access control during application start-up in SAP AS NetWeaver JAVA.CVE-2023-307448.2 High
- sap sapui5Improper Neutralization of Input in SAPUI5CVE-2023-307437.1 High
- sap se crm (webclient ui), sap customer relationship management s4fnd, customer relationship management webclient ui +2 moreCross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)CVE-2023-307426.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-307416.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2023-307406.3 Medium
- sap s4fnd, sapscore, sap se crm webclient ui +1 more +3 moreCross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UICVE-2023-291885.4 Medium
- sap businessobjects, sap se businessobjects platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects PlatformCVE-2023-287643.7 Low
- sap businessobjects business intelligence, sap se businessobjects intelligence platform +1 moreInformation Disclosure in SAP BusinessObjects Intelligence PlatformCVE-2023-287629.1 Critical
- sap se gui for html, sap netweaver, netweaver application server abap +2 moreCross-Site Scripting (XSS) vulnerability in SAP GUI for HTMLCVE-2023-274996.1 Medium
- sap netweaverCross-Site Scripting (XSS) vulnerability in SAP NetWeaverCVE-2023-00216.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 moreDue to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...CVE-2023-238586.1 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence (web intelligence ui) +1 moreIn SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430,...CVE-2023-238564.3 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated...CVE-2023-00208.5 High
- sap se grc (process control), sap grc process control +1 moreIn SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700,...CVE-2023-00196.5 Medium
- sap businessobjects business intelligence platform, business objects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)CVE-2023-00154.6 Medium
- sap se netweaver abap server and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...CVE-2022-412154.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412148.7 High
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412124.9 Medium
- Show moreLoading…