sap

1,577 tracked vulnerabilities.

CVE-2023-0015 MEDIUM
SAP BusinessObjects Business Intelligence Platform 420 - Cross-Site Scripting via Web Intelligence DHTML JSP Response
Jan 10, 2023
CVSS 4.6
EPSS 0.00
CVE-2023-0014 CRITICAL
SAP NetWeaver ABAP Server/ABAP Platform - Info Disclosure
Jan 10, 2023
CVSS 9.0
EPSS 0.01
CVE-2023-0013 MEDIUM
SAP NetWeaver Application Server - XSS
Jan 10, 2023
CVSS 6.1
EPSS 0.00
CVE-2023-0012 MEDIUM
SAP Host Agent (Windows) <7.22 - Privilege Escalation
Jan 10, 2023
CVSS 6.4
EPSS 0.00
CVE-2022-41275 MEDIUM
SAP Solution Manager - Open Redirect
Dec 13, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-41274 MEDIUM
SAP Disclosure Mgmt <10.1 - Info Disclosure
Dec 13, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-41273 MEDIUM
SAP Sourcing & CLM 1100 - Open Redirect
Dec 13, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-41272 CRITICAL
SAP NetWeaver PI <7.50 - Info Disclosure
Dec 13, 2022
CVSS 9.9
EPSS 0.01
CVE-2022-41271 CRITICAL
SAP NetWeaver PI 7.50 - Info Disclosure
Dec 13, 2022
CVSS 9.4
EPSS 0.01
CVE-2022-41268 HIGH
SAP - Privilege Escalation
Dec 13, 2022
CVSS 8.5
EPSS 0.01
CVE-2022-41267 CRITICAL
SAP Business Objects Platform - File Upload RCE
Dec 13, 2022
CVSS 9.9
EPSS 0.01
CVE-2022-41266 HIGH
SAP Commerce Webservices <2105 - XSS
Dec 13, 2022
CVSS 8.0
EPSS 0.00
CVE-2022-41264 HIGH
SAP BASIS 731, 740, 750-757, 789-791 - Authenticated Remote Code Execution via RFC Function Module
Dec 13, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-41263 MEDIUM
SAP Business Objects <430 - Auth Bypass
Dec 12, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-41262 MEDIUM
SAP NetWeaver AS Java (HTTP Provider Service) -7.50 - XSS
Dec 12, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-41261 MEDIUM
SAP Solution Manager Diagnostic Agent <7.20 - Info Disclosure
Dec 12, 2022
CVSS 6.0
EPSS 0.00
CVE-2022-31596 MEDIUM
SAP BusinessObjects <430 - Info Disclosure
Dec 12, 2022
CVSS 6.0
EPSS 0.01
CVE-2022-41260 MEDIUM
SAP Financial Consolidation -1010 - XSS
Nov 08, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-41259 MEDIUM
SAP SQL Anywhere 17.0 - Authenticated Denial of Service via ARRAY Constructor Query
Nov 08, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-41258 MEDIUM
SAP Financial Consolidation <1010 - XSS
Nov 08, 2022
CVSS 6.5
EPSS 0.00
CVE-2022-41215 MEDIUM
SAP NetWeaver ABAP Server and ABAP Platform - Unauthenticated Open Redirect via Insufficient URL Validation
Nov 08, 2022
CVSS 4.7
EPSS 0.00
CVE-2022-41214 HIGH
SAP NetWeaver Application Server ABAP/ABAP Platform - Privilege Esc...
Nov 08, 2022
CVSS 8.7
EPSS 0.01
CVE-2022-41212 MEDIUM
SAP NetWeaver Application Server ABAP/ABAP Platform - Info Disclosure
Nov 08, 2022
CVSS 4.9
EPSS 0.01
CVE-2022-41211 HIGH
SAP 3D Visual Enterprise Author and Viewer - Arbitrary Code Execution via Memory Corruption
Nov 08, 2022
CVSS 7.0
EPSS 0.00
CVE-2022-41208 MEDIUM
SAP Financial Consolidation <1010 - Privilege Escalation
Nov 08, 2022
CVSS 5.4
EPSS 0.00
Products
3d_visual_enterprise_viewer 131 netweaver 102 netweaver_application_server_abap 86 businessobjects_business_intelligence_platform 73 netweaver_application_server_java 69 businessobjects_business_intelligence 45 hana 38 solution_manager 33 business_one 31 internet_graphics_server 28 3d_visual_enterprise_author 27 businessobjects 23 netweaver_abap 21 netweaver_process_integration 21 netweaver_enterprise_portal 20 business_objects_business_intelligence_platform 18 commerce_cloud 18 hana_extended_application_services 18 sap_basis 18 s\/4hana 17 disclosure_management 16 host_agent 15 adaptive_server_enterprise 14 enable_now 14 s4core 13 abap_platform 12 customer_relationship_management_webclient_ui 12 netweaver_as_abap 12 sap_db 12 sap_kernel 11
Quick Filters
Critical CVEs With Exploits In CISA KEV