VYPR
← SAP

Vendor CVEs

SAP

All CVEs

1,818 total · sorted by risk
  • CVE-2020-6286Jul 14, 2020
    SAP
    Netweaver As Java
    risk 0.07cvss —epss 0.28

    The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to…

  • CVE-2010-2590Dec 22, 2010
    SAP
    Crystal Reports
    risk 0.07cvss —epss 0.47

    Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.

  • CVE-2012-2611May 15, 2012
    SAP
    Netweaver
    risk 0.06cvss —epss 0.42

    The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a…

  • CVE-2007-4475Apr 1, 2009
    SAP
    Sapgui
    risk 0.06cvss —epss 0.40

    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

  • CVE-2007-3624Jul 9, 2007
    SAP
    Sap Message Server
    risk 0.06cvss —epss 0.37

    Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.

  • CVE-2013-3319Aug 16, 2013
    SAP
    Netweaver
    risk 0.05cvss —epss 0.21

    The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.

  • CVE-2008-4830Apr 16, 2009
    SAP
    KWEdit ActiveX control
    risk 0.05cvss —epss 0.28

    Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…

  • CVE-2022-28213Apr 12, 2022
    SAP
    BusinessObjects Business Intelligence Platform (Web Intelligence)
    risk 0.04cvss —epss 0.12

    When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful…

  • CVE-2014-0995Nov 6, 2014
    SAP
    Netweaver
    risk 0.04cvss —epss 0.10

    The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.

  • CVE-2013-6025Oct 19, 2013
    Sybase
    Adaptive Server Enterprise
    risk 0.04cvss —epss 0.08

    The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an…

  • CVE-2010-1185Mar 29, 2010
    SAP
    Maxdb
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid length parameter in a handshake packet to TCP port 7210. NOTE: some of these details are obtained from third party…

  • CVE-2007-3606Jul 6, 2007
    SAP
    Enjoysap
    risk 0.04cvss —epss 0.08

    Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function.

  • CVE-2006-6010Nov 21, 2006
    SAP
    SAP
    risk 0.04cvss —epss 0.14

    SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.

  • CVE-2005-3634Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.04cvss —epss 0.19

    frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

  • CVE-2003-0748Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space…

  • CVE-2021-42063Dec 14, 2021
    SAP
    Knowledge Warehouse
    risk 0.03cvss —epss 0.22

    A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.

  • CVE-2019-0307Jun 12, 2019
    SAP
    Solution Manager
    risk 0.03cvss —epss 0.02

    Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges…

  • CVE-2015-7986Oct 27, 2015
    SAP
    Hana
    risk 0.03cvss —epss 0.06

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

  • CVE-2014-0984Apr 17, 2014
    SAP
    Router
    risk 0.03cvss —epss 0.03

    The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force…

  • CVE-2012-2612May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.03

    The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2514May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.03

    The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2513May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.03

    The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2512May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.03

    The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2511May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2008-2421May 23, 2008
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under…

  • CVE-2008-2123May 9, 2008
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a…

  • CVE-2007-3613Jul 6, 2007
    SAP
    Internet Graphics Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.

  • CVE-2007-3608Jul 6, 2007
    SAP
    Enjoysap
    risk 0.03cvss —epss 0.03

    Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors.

  • CVE-2007-3607Jul 6, 2007
    SAP
    Enjoysap
    risk 0.03cvss —epss 0.04

    Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (process crash) via unspecified vectors.

  • CVE-2006-5784Nov 7, 2006
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by…

  • CVE-2006-5114Oct 3, 2006
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter, different vectors than CVE-2003-0749.

  • CVE-2006-1039Mar 7, 2006
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.03

    SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

  • CVE-2006-0731Feb 16, 2006
    SAP
    Business Connector
    risk 0.03cvss —epss 0.03

    WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.

  • CVE-2005-3636Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.

  • CVE-2005-3635Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.

  • CVE-2002-1576Apr 15, 2004
    SAP
    DB
    risk 0.03cvss —epss 0.01

    lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

  • CVE-2003-0747Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.03

    wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5)…

  • CVE-2003-0749Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.

  • CVE-2003-0265May 27, 2003
    SAP
    DB
    risk 0.03cvss —epss 0.01

    Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

  • CVE-2021-21480Mar 9, 2021
    SAP
    MII
    risk 0.02cvss —epss 0.51

    SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). An attacker can intercept a request to the server, inject malicious JSP code in the request and forward to server. When this dashboard is opened by users…

  • CVE-2020-6364Oct 15, 2020
    SAP
    Solution Manager
    risk 0.02cvss —epss 0.06

    SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise…

  • CVE-2024-41730Aug 13, 2024
    SAP
    BusinessObjects Business Intelligence Platform (Web Intelligence)
    risk 0.01cvss —epss 0.76

    In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on confidentiality,…

  • CVE-2014-9320Aug 9, 2021
    SAP
    Businessobjects Edge
    risk 0.01cvss —epss 0.04

    SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.

  • CVE-2020-26836Dec 9, 2020
    SAP
    Solution Manager
    risk 0.01cvss —epss 0.02

    SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as…

  • CVE-2015-7828Nov 10, 2015
    SAP
    Hana
    risk 0.01cvss —epss 0.07

    SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8)…

  • CVE-2012-4341Aug 15, 2012
    SAP
    Netweaver Abap
    risk 0.01cvss —epss 0.09

    Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package…

  • CVE-2010-3032Aug 17, 2010
    SAP
    Crystal Reports
    risk 0.01cvss —epss 0.06

    Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a…

  • CVE-2008-4827Jan 8, 2009
    Componentone
    Sizerone
    risk 0.01cvss —epss 0.07

    Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8,…

  • CVE-2008-4387Nov 10, 2008
    SAP
    Sapgui
    risk 0.01cvss —epss 0.15

    Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

  • CVE-2007-6254Mar 20, 2008
    SAP
    Businessobjects
    risk 0.01cvss —epss 0.06

    Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.

Page 11 of 37