Skip to content
OpenAdvisories

Product · SAP

SAP Host Agent

10 known vulnerabilities.

SAP Host Agent at a glance

Last 12 months
1
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.5
    CVE-2026-120015

    Insufficient Input Validation in SAP Host Agent

    SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successf…

    SAP SAP Host Agent
  • Medium 6.3
    CVE-2024-47595

    Local Privilege Escalation in SAP Host Agent

    An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.

    SAP SAP Host Agent
  • Critical 9.8
    CVE-2023-40309

    Missing Authorization check in SAP CommonCryptoLib

    SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired…

    SAP SAP Web Dispatcher SAP Host Agent SAP HANA database
  • High 7.5
    CVE-2023-40308

    Memory Corruption vulnerability in SAP CommonCryptoLib

    SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view…

    SAP SAP Web Dispatcher SAP Host Agent SAP HANA database
  • Low 3.7
    CVE-2023-36926

    Information disclosure vulnerability in SAP Host Agent

    Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumented parameter to a particular compatibility value and in turn call read functions. This allows the attacker to gather some non-sensitive info…

    SAP SAP Host Agent
  • Unscored —
    CVE-2022-29616

    SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to ca…

    SAP SAP NetWeaver and ABAP Platform SAP Host Agent
  • Unscored —
    CVE-2022-28774

    Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.

    SAP SAP Host Agent
  • High 7.2
    CVE-2020-6234

    SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root priv…

    SAP SAP Host Agent
  • High 7.5
    CVE-2020-6186

    SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentic…

    SAP SAP Host Agent
  • Medium 5.3
    CVE-2020-6183

    SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by se…

    SAP SAP Host Agent