SAP_SE

283 tracked vulnerabilities.

CVE-2024-44120 MEDIUM
SAP NetWeaver Enterprise Portal - XSS
Sep 10, 2024
CVSS 4.7
EPSS 0.01
CVE-2024-44117 MEDIUM
SAP NetWeaver Application Server for ABAP and ABAP Platform - Missing Authorization in RFC Function Module
Sep 10, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-45286 MEDIUM
SAP Production and Revenue Accounting - Info Disclosure
Sep 10, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-44116 MEDIUM
SAP NetWeaver Application Server for ABAP and ABAP Platform - Missing Authorization in RFC Function Module
Sep 10, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-44115 MEDIUM
SAP NetWeaver Application Server for ABAP and ABAP Platform - Missing Authorization in RFC Function Module
Sep 10, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-44113 MEDIUM
SAP Business Warehouse - Info Disclosure
Sep 10, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-42380 MEDIUM
SAP NetWeaver Application Server for ABAP and ABAP Platform - Missing Authorization in RFC Function Module
Sep 10, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-42378 MEDIUM
SAP S/4HANA eProcurement - Reflected Cross-Site Scripting via Weak Input Encoding
Sep 10, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-42371 MEDIUM
SAP NetWeaver Application Server for ABAP and ABAP Platform - Missing Authorization in RFC Function Module
Sep 10, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-41729 MEDIUM
SAP NetWeaver BW (BEx Analyzer) - Authenticated Information Disclosure via Missing Authorization Checks
Sep 10, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-39596 MEDIUM
SAP Enable Now - Missing Authorization
Jul 09, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-39597 HIGH
SAP Commerce HY_COM 2205 and COM_CLOUD 2211 - Improper Authorization via Forgotten Password Functionality
Jul 09, 2024
CVSS 7.2
EPSS 0.00
CVE-2024-37178 MEDIUM
SAP Financial Consolidation - Cross-Site Scripting
Jun 11, 2024
CVSS 5.0
EPSS 0.00
CVE-2024-37177 HIGH
SAP Financial Consolidation - Info Disclosure
Jun 11, 2024
CVSS 8.1
EPSS 0.00
CVE-2024-4139 MEDIUM
Manage Bank Statement ReProcessing Rules - Privilege Escalation
May 14, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-4138 MEDIUM
Manage Bank Statement ReProcessing Rules - Privilege Escalation
May 14, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-33009 MEDIUM
SAP Global Label Management - SQL Injection
May 14, 2024
CVSS 4.2
EPSS 0.00
CVE-2024-33008 MEDIUM
SAP Replication Server - Memory Corruption
May 14, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-33007 LOW
SAPUI5 PDFViewer - Embedded JavaScript Execution
May 14, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-33006 CRITICAL
SAP NetWeaver ABAP Platform - Unauthenticated Dangerous File Upload
May 14, 2024
CVSS 9.6
EPSS 0.01
CVE-2024-33002 MEDIUM
SAP S/4HANA Document Service Handler for DPS - Cross-Site Scripting
May 14, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-33000 LOW
SAP Bank Account Management - Privilege Escalation
May 14, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-32733 MEDIUM
SAP NetWeaver Application Server ABAP/ABAP Platform - XSS
May 14, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-32731 MEDIUM
SAP My Travel Requests - Privilege Escalation
May 14, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-32730 MEDIUM
SAP Enable Now Manager - Privilege Escalation
May 14, 2024
CVSS 6.5
EPSS 0.00
Products
SAP NetWeaver Application Server for ABAP and ABAP Platform 10 SAP NetWeaver Application Server ABAP 9 SAP Fiori App (Intercompany Balance Reconciliation) 6 SAP GUI for Windows 6 SAP NetWeaver Application Server Java 6 SAP NetWeaver Application Server for ABAP 6 SAP BusinessObjects Business Intelligence Platform 5 SAP Financial Consolidation 4 SAP NetWeaver Application Server ABAP and ABAP Platform 4 SAP NetWeaver Enterprise Portal 4 SAPCAR 4 SAP Business One (SLD) 3 SAP Commerce Cloud 3 SAP HCM (My Timesheet Fiori 2.0 application) 3 SAP MDM Server 3 SAP NetWeaver AS for JAVA (Adobe Document Services) 3 SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) 3 SAP NetWeaver and ABAP Platform (SDCCN) 3 SAP Solution Manager 3 SAP Business Connector 2 SAP Business Warehouse and SAP Plug-In Basis 2 SAP Commerce 2 SAP Enable Now 2 SAP Landscape Transformation 2 SAP Landscape Transformation (Analysis Platform) 2 SAP NetWeaver 2 SAP NetWeaver ABAP Platform 2 SAP NetWeaver Application Server ABAP (BIC Document) 2 SAP S/4 HANA (Cash Management) 2 SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) 2
Quick Filters
Critical CVEs With Exploits In CISA KEV