Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se s/4 hana (manage bank statement reprocessing rules), sap s\/4hana +1 moreMissing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)CVE-2024-41384.3 Medium
- sap se s/4 hana (manage bank statement reprocessing rules)Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)CVE-2024-41394.3 Medium
- sap business objects business intelligence platform, businessobjects business intelligence platform +1 moreCross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2024-281658.1 High
- sap se s/4hana (document service handler for dps)Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)CVE-2024-330026.1 Medium
- sap bank account managementMissing Authorization check in SAP Bank Account ManagementCVE-2024-330003.5 Low
- sap se replication serverMemory Corruption vulnerability in SAP Replication ServerCVE-2024-330084.9 Medium
- sap se sapui5, sapui5 (pdfviewer) +1 moreClient-side script execution vulnerability in SAP UI5(PDFViewer)CVE-2024-330073.5 Low
- sap se netweaver application server abap and abap platformCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2024-327336.1 Medium
- sap se my travel requestsMissing Authorization check in SAP My Travel RequestsCVE-2024-327315.5 Medium
- sap enable now manager, sap se enable now +1 moreMissing authorization check in SAP Enable Now ManagerCVE-2024-327306.5 Medium
- sap se netweaver as abap and abap platformDenial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2024-302186.5 Medium
- sap se s/4 hana (cash management)Missing Authorization check in SAP S/4 HANA (Cash Management)CVE-2024-302174.3 Medium
- sap se s/4 hana (cash management)Missing Authorization check in SAP S/4 HANA (Cash Management)CVE-2024-302164.3 Medium
- sap se business connectorCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2024-302154.8 Medium
- sap se business connectorCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2024-302144.8 Medium
- sap se group reporting data collection (enter package data), group reporting data collection +1 moreMissing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)CVE-2024-281676.5 Medium
- sap asset accountingDirectory Traversal vulnerability in SAP Asset AccountingCVE-2024-279017.2 High
- sap se netweaver as java user management engineSecurity misconfiguration vulnerability in SAP NetWeaver AS Java User Management EngineCVE-2024-278998.8 High
- sap netweaverServer-Side Request Forgery in SAP NetWeaverCVE-2024-278985.3 Medium
- sap businessobjects web intelligenceInformation Disclosure vulnerability in SAP BusinessObjects Web IntelligenceCVE-2024-256467.7 High
- sap se netweaver (enterprise portal), sap netweaver enterprise portal +1 moreInformation Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)CVE-2024-256455.3 Medium
- sap netweaver process integration, sap se netweaver process integration (support web pages) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)CVE-2024-281635.3 Medium
- sap netweaver as abap, sap se netweaver as abap applications based on sapgui for html (webgui) +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)CVE-2024-279025.4 Medium
- sap abap platformMissing Authorization check in SAP ABAP PlatformCVE-2024-279004.3 Medium
- sap netweaver, sap se netweaver (wsrm) +1 moreInformation Disclosure vulnerability in NetWeaver (WSRM)CVE-2024-256445.3 Medium
- sap fiori front end serverImproper Access Control in SAP Fiori Front End ServerCVE-2024-221334.6 Medium
- sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 moreCode Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)CVE-2024-22127Public exploit9.1 Critical
- sap master data governance for material data, sap se master data governance material +1 moreMissing Authorization check in SAP Master Data Governance MaterialCVE-2024-247414.3 Medium
- sap companionCross-Site Scripting (XSS) vulnerability in SAP CompanionCVE-2024-221295.4 Medium
- sap fiori, sap se fiori app (my overtime requests) +1 moreMissing authorization check in SAP Fiori app (My Overtime Requests)CVE-2024-256434.3 Medium
- sap cloud connectorImproper Certificate Validation in SAP Cloud ConnectorCVE-2024-256427.4 High
- sap se netweaver as java (guided procedures), sap netweaver application server java +1 moreXXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)CVE-2024-247438.6 High
- sap se crm (webclient ui), sap crm - webclient ui +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)CVE-2024-247424.1 Medium
- sap netweaver application server abap, sap se netweaver application server abap (sap kernel) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel)CVE-2024-247405.3 Medium
- sap bank account management, sap se bam (bank account management) +1 moreMissing authorization check in SAP BAM (Bank Account Management)CVE-2024-247396.3 Medium
- sap ides ecc, sap se ides systems +1 moreCode Injection vulnerability in SAP IDES SystemsCVE-2024-221327.4 High
- sap aba, sap se aba (application basis), sap abap platform +2 moreCode Injection vulnerability in SAP ABA (Application Basis)CVE-2024-221319.1 Critical
- sap se crm webclient ui, sap crm - webclient ui +1 moreCross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UICVE-2024-221307.6 High
- sap netweaver business client for htmlCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Business Client for HTMLCVE-2024-221284.7 Medium
- sap se netweaver as java (user admin application), sap netweaver application server java +1 moreCross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)CVE-2024-221266.1 Medium
- sap gui connector, sap se microsoft edge browser extension (sap gui connector for microsoft edge) +1 moreInformation Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)CVE-2024-221257.4 High
- sap netweaver, sap se netweaver (internet communication manager) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Internet Communication ManagerCVE-2024-221244.1 Medium
- sap se netweaver abap application server and abap platform, sap netweaver application server abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP PlatformCVE-2024-217384.1 Medium
- sap application interface framework, sap se application interface framework (file adapter) +1 moreCode Injection vulnerability in SAP Application Interface Framework (File Adapter)CVE-2024-217378.4 High
- sap se s/4hana finance (advanced payment management), sap s\/4hana finance +1 moreMissing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)CVE-2024-217366.4 Medium
- sap lt replication serverImproper Authorization check in SAP LT Replication ServerCVE-2024-217357.3 High
- sap marketing, sap se marketing (contacts app) +1 moreURL Redirection vulnerability in SAP Marketing (Contacts App)CVE-2024-217343.7 Low
- sap sap-xssecEscalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)CVE-2023-50423Fix available9.1 Critical
- sap emarsys sdk, sap se emarsys sdk android +1 moreImproper Export of Android Application Components in SAP EMARSYS SDK ANDROIDCVE-2023-65427.1 High
- sap solution managerCommand Injection vulnerability in SAP Solution ManagerCVE-2023-495876.4 Medium
- Show moreLoading…