Vendor
SAP
1,623 known vulnerabilities.
Products
SAP 3D Visual Enterprise Viewer 127
SAP BusinessObjects Business Intelligence Platform 36
SAP 3D Visual Enterprise Author 27
SAP NetWeaver Enterprise Portal 22
SAP Business One 21
SAP NetWeaver Application Server for ABAP and ABAP Platform 18
SAP Enable Now 16
SAP NetWeaver AS ABAP and ABAP Platform 16
SAP NetWeaver Application Server for ABAP 15
SAP Disclosure Management 15
SAP HANA Extended Application Services 15
SAP Business Objects Business Intelligence Platform 15
SAP NetWeaver Application Server ABAP 14
SAP Commerce 14
SAP Commerce Cloud 13
SAP Internet Graphics Server 13
SAP NetWeaver Application Server ABAP and ABAP Platform 13
SAP NetWeaver Application Server Java 12
SAP GUI for Windows 12
SAP Financial Consolidation 11
SAP NetWeaver and ABAP Platform 11
SAP Business AI Platform (Approuter) 11
SAP Web Dispatcher 11
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) 10
SAP Host Agent 10
SAP CRM (WebClient UI) 10
SAP Cloud Connector 10
SAP NetWeaver AS Java 9
SAP Manufacturing Integration and Intelligence 9
SAP NetWeaver ABAP Server and ABAP Platform 8
SAP Solution Manager 8
SAP HANA 8
SAP Adaptive Server Enterprise 8
SAP HANA database 7
SAP Internet Graphics Service 7
SAP S/4HANA 7
NetWeaver AS for ABAP and ABAP Platform 7
SAP Internet Graphics Server (IGS) 7
SAP Business Connector 7
SAP NetWeaver AS ABAP 7
779 results · Clear filters · Feed
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…
-
Medium 6.5
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoint…
-
Medium 5.3
SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attac…
-
Medium 4.2
SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user…
-
Medium 6.5
Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any …
-
Medium 5.4
SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of…
-
Medium 5.4
SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is s…
-
Medium 6.1
SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use…
-
Medium 4.4
SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its i…
-
Medium 6.5
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated use…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sour…
-
Medium 4.9
SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys …
-
Medium 5.4
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated use…
-
Medium 5.3
SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to…
-
Medium 4.3
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization i…
-
Medium 5.3
SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission …
-
Medium 4.8
SAP NetWeaver Design Time Repository (DTR), versions - 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-…
-
Medium 4.3
SAP Banking Services version 500, use an incorrect authorization object in some of its reports. Although the affected r…
-
Medium 5.3
SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated a…
-
Medium 5.7
SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which ca…
-
Medium 4.7
SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file rece…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm)…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted source…
-
Medium 4.3
User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exp…
-
Medium 5.4
SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an at…
-
Medium 6.1
SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticate…
-
Medium 5.4
SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authent…
-
Medium 6.5
Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version…
-
Medium 6.1
SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, all…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…
-
Medium 4.3
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted source…