Skip to content
OpenAdvisories

Vendor

SAP

1,623 known vulnerabilities.

Products

SAP 3D Visual Enterprise Viewer 127 SAP BusinessObjects Business Intelligence Platform 36 SAP 3D Visual Enterprise Author 27 SAP NetWeaver Enterprise Portal 22 SAP Business One 21 SAP NetWeaver Application Server for ABAP and ABAP Platform 18 SAP Enable Now 16 SAP NetWeaver AS ABAP and ABAP Platform 16 SAP NetWeaver Application Server for ABAP 15 SAP Disclosure Management 15 SAP HANA Extended Application Services 15 SAP Business Objects Business Intelligence Platform 15 SAP NetWeaver Application Server ABAP 14 SAP Commerce 14 SAP Commerce Cloud 13 SAP Internet Graphics Server 13 SAP NetWeaver Application Server ABAP and ABAP Platform 13 SAP NetWeaver Application Server Java 12 SAP GUI for Windows 12 SAP Financial Consolidation 11 SAP NetWeaver and ABAP Platform 11 SAP Business AI Platform (Approuter) 11 SAP Web Dispatcher 11 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) 10 SAP Host Agent 10 SAP CRM (WebClient UI) 10 SAP Cloud Connector 10 SAP NetWeaver AS Java 9 SAP Manufacturing Integration and Intelligence 9 SAP NetWeaver ABAP Server and ABAP Platform 8 SAP Solution Manager 8 SAP HANA 8 SAP Adaptive Server Enterprise 8 SAP HANA database 7 SAP Internet Graphics Service 7 SAP S/4HANA 7 NetWeaver AS for ABAP and ABAP Platform 7 SAP Internet Graphics Server (IGS) 7 SAP Business Connector 7 SAP NetWeaver AS ABAP 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-0054 Public exploit

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java

    SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be la…

    SAP SAP NetWeaver Application Server Java
  • Medium 5.3
    CVE-2020-6308 Public exploit Scanner template EPSS 62%

    SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated a…

    SAP SAP BusinessObjects Business Intelligence Platform (Web Services)
  • Medium 5.3
    CVE-2020-6286 Public exploit EPSS 24%

    The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configurati…

    SAP SAP NetWeaver AS JAVA (LM Configuration Wizard)
  • Medium 6.6
    CVE-2018-2380 Exploited · Ransomware Public exploit EPSS 29%

    SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information p…

    SAP SAP CRM
    KEV Nov 3, 2021