Vendor
SAP
1,623 known vulnerabilities.
Products
SAP 3D Visual Enterprise Viewer 127
SAP BusinessObjects Business Intelligence Platform 36
SAP 3D Visual Enterprise Author 27
SAP NetWeaver Enterprise Portal 22
SAP Business One 21
SAP NetWeaver Application Server for ABAP and ABAP Platform 18
SAP Enable Now 16
SAP NetWeaver AS ABAP and ABAP Platform 16
SAP NetWeaver Application Server for ABAP 15
SAP Disclosure Management 15
SAP HANA Extended Application Services 15
SAP Business Objects Business Intelligence Platform 15
SAP NetWeaver Application Server ABAP 14
SAP Commerce 14
SAP Commerce Cloud 13
SAP Internet Graphics Server 13
SAP NetWeaver Application Server ABAP and ABAP Platform 13
SAP NetWeaver Application Server Java 12
SAP GUI for Windows 12
SAP Financial Consolidation 11
SAP NetWeaver and ABAP Platform 11
SAP Business AI Platform (Approuter) 11
SAP Web Dispatcher 11
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) 10
SAP Host Agent 10
SAP CRM (WebClient UI) 10
SAP Cloud Connector 10
SAP NetWeaver AS Java 9
SAP Manufacturing Integration and Intelligence 9
SAP NetWeaver ABAP Server and ABAP Platform 8
SAP Solution Manager 8
SAP HANA 8
SAP Adaptive Server Enterprise 8
SAP HANA database 7
SAP Internet Graphics Service 7
SAP S/4HANA 7
NetWeaver AS for ABAP and ABAP Platform 7
SAP Internet Graphics Server (IGS) 7
SAP Business Connector 7
SAP NetWeaver AS ABAP 7
779 results · Clear filters · Feed
-
Medium 4.3
When a user opens manipulated Autodesk 3D Studio for MS-DOS (.3DS) files received from untrusted sources in SAP 3D Visu…
-
Medium 4.3
When a user opens manipulated Portable Document Format (.PDF) files received from untrusted sources in SAP 3D Visual En…
-
Medium 4.3
When a user opens manipulated Graphics Interchange Format (.GIF) files received from untrusted sources in SAP 3D Visual…
-
Medium 4.7
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.3…
-
Medium 4.3
When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Vie…
-
Medium 4.3
When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visu…
-
Medium 4.3
When a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted sources in SAP 3D Visual E…
-
Medium 4.3
When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer vers…
-
Medium 4.3
When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Vis…
-
Medium 4.3
When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual …
-
Medium 4.3
When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Vi…
-
Medium 4.3
When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Vi…
-
Medium 4.3
When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D …
-
Medium 6.8
SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in…
-
Medium 4.3
When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D…
-
Medium 6.8
SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does …
-
Medium 6.5
Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to dese…
-
Medium 6.3
Arbitrary code execution in less-openui5
less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources (i.e. `*.less` files) with less-openui5 that originate from an untrusted source, those resources might c…
-
Medium 4.7
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
-
Medium 4.7
SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated a…
-
Medium 5.4
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the resp…
-
Medium 6.8
Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to ex…
-
Medium 6.3
SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set …
-
Medium 5.3
When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed,…
-
Medium 5.4
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated da…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…
-
Medium 4.3
SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, r…
-
Medium 6.5
The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escal…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…
-
Medium 5.4
SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malic…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 5.3
SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend …
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…