SAP

779 results · Clear filters · Feed

• Medium 4.7
  CVE-2018-2415

  SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, …

  SAP SAP NetWeaver Application Server (J2EE Engine Server Core) SAP NetWeaver Application Server (Engine API)
  May 9, 2018
• Medium 6.5
  CVE-2018-2420

  SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including s…

  SAP SAP Internet Graphics Server (IGS)
  May 9, 2018
• Medium 5.3
  CVE-2018-2421

  SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitima…

  SAP SAP Internet Graphics Server (IGS)
  May 9, 2018
• Medium 5.5
  CVE-2018-2418

  SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the app…

  SAP SAP MaxDB ODBC driver
  May 9, 2018
• Medium 5.3
  CVE-2018-2422

  SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitima…

  SAP SAP Internet Graphics Server (IGS)
  May 9, 2018
• Medium 5.3
  CVE-2018-2423

  SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to preven…

  SAP SAP Internet Graphics Server (IGS)
  May 9, 2018
• Medium 5.4
  CVE-2018-2410

  SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cros…

  SAP SAP Business One
  Apr 10, 2018
• Medium 5.4
  CVE-2018-2403

  Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise…

  SAP SAP Disclosure Management
  Apr 10, 2018
• Medium 5.4
  CVE-2018-2405

  SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an…

  SAP SAP Solution Manager
  Apr 10, 2018
• Medium 4.3
  CVE-2018-2404

  SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.

  SAP SAP Disclosure Management
  Apr 10, 2018
• Medium 5.3
  CVE-2018-2406

  Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.…

  SAP SAP Crystal Reports Server, OEM Edition
  Apr 10, 2018
• Medium 6.3
  CVE-2018-2409

  Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain…

  SAP SAP Cloud Platform Connector
  Apr 10, 2018
• Medium 5.4
  CVE-2018-2413

  SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in …

  SAP SAP Disclosure Management
  Apr 10, 2018
• Medium 6.7
  CVE-2018-2398

  Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be rest…

  SAP SAP Business Client
  Mar 14, 2018
• Medium 6.1
  CVE-2018-2399

  Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inef…

  SAP SAP Process Monitoring Infrastructure
  Mar 14, 2018
• Medium 5.4
  CVE-2018-2397

  In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) do…

  SAP SAP Business Objects Business Intelligence Platform
  Mar 14, 2018
• Medium 5.4
  CVE-2018-2401

  SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrus…

  SAP SAP Business Process Automation (BPA) By Redwood
  Mar 14, 2018
• Medium 4.3
  CVE-2018-2366

  SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of pa…

  SAP SAP Business Process Automation (BPA) By Redwood
  Mar 14, 2018
• Medium 6.6
  CVE-2018-2380 Exploited · Ransomware Public exploit EPSS 29%

  SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information p…

  SAP SAP CRM
  Mar 1, 2018

  KEV Nov 3, 2021