Vendor CVEs

SAP

All CVEs

1,962 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-6358	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6357	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6356	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6355	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6354	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6353	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6352	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6351	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6350	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6349	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6348	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6347	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6346	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6345	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6344	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6343	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6342	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6341	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6340	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6339	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6338	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input…
CVE-2020-6337	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6336	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6335	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6334	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6333	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6332	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6331	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6330	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6329	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6328	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6327	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6322	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6314	SAP 3d Visual Enterprise Viewer	Med	0.28	4.3	0.02	Sep 9, 2020	SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6310	SAP Abap Platform	Med	0.28	4.3	0.01	Aug 12, 2020	Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
CVE-2020-6299	SAP Abap Platform	Med	0.28	4.3	0.01	Aug 12, 2020	SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
CVE-2020-6273	SAP Fiori UI for General Ledger Accounting	Med	0.28	4.3	0.01	Aug 12, 2020	SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check.
CVE-2020-6256	SAP Master Data Governance	Med	0.28	4.3	0.01	May 12, 2020	SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
CVE-2020-6233	SAP Banking Services From Sap	Med	0.28	4.3	0.01	Apr 14, 2020	SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system.
CVE-2020-6206	SAP Cloud Platform Integration	Med	0.28	4.3	0.00	Mar 10, 2020	SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.
CVE-2020-6204	SAP S4CORE	Med	0.28	4.3	0.01	Mar 10, 2020	The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number,…
CVE-2015-7968	SAP Netweaver Application Server	Med	0.28	4.3	0.01	Mar 9, 2020	nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.
CVE-2020-6177	SAP Mobile Platform	Med	0.28	4.3	0.01	Feb 12, 2020	SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of leaking content of files on…
CVE-2020-6307	SAP BASIS	Med	0.28	4.3	0.01	Jan 14, 2020	Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
CVE-2019-0393	SAP Quality Management	Med	0.28	4.3	0.01	Nov 13, 2019	An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
CVE-2019-0391	SAP Netweaver As Java	Med	0.28	4.3	0.01	Nov 13, 2019	Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
CVE-2019-0390	SAP Data Hub	Med	0.28	4.3	0.01	Nov 13, 2019	Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
CVE-2019-0367	SAP Netweaver Process Integration	Med	0.28	4.3	0.01	Oct 8, 2019	SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
CVE-2019-0364	SAP Hana Extended Application Services	Med	0.28	4.3	0.01	Sep 10, 2019	Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
CVE-2019-0356	SAP Netweaver Process Integration	Med	0.28	4.3	0.01	Sep 10, 2019	Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

CVE-2020-6358MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6357MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6356MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6355MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6354MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6353MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6352MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6351MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6350MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6349MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6348MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6347MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6346MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6345MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6344MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6343MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6342MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6341MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6340MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6339MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6338MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input…
CVE-2020-6337MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6336MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6335MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6334MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6333MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6332MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6331MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6330MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6329MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6328MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6327MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6322MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6314MedSep 9, 2020
SAP
3d Visual Enterprise Viewer
risk 0.28cvss 4.3epss 0.02
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
CVE-2020-6310MedAug 12, 2020
SAP
Abap Platform
risk 0.28cvss 4.3epss 0.01
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
CVE-2020-6299MedAug 12, 2020
SAP
Abap Platform
risk 0.28cvss 4.3epss 0.01
SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.
CVE-2020-6273MedAug 12, 2020
SAP
Fiori UI for General Ledger Accounting
risk 0.28cvss 4.3epss 0.01
SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check.
CVE-2020-6256MedMay 12, 2020
SAP
Master Data Governance
risk 0.28cvss 4.3epss 0.01
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
CVE-2020-6233MedApr 14, 2020
SAP
Banking Services From Sap
risk 0.28cvss 4.3epss 0.01
SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system.
CVE-2020-6206MedMar 10, 2020
SAP
Cloud Platform Integration
risk 0.28cvss 4.3epss 0.00
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.
CVE-2020-6204MedMar 10, 2020
SAP
S4CORE
risk 0.28cvss 4.3epss 0.01
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number,…
CVE-2015-7968MedMar 9, 2020
SAP
Netweaver Application Server
risk 0.28cvss 4.3epss 0.01
nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.
CVE-2020-6177MedFeb 12, 2020
SAP
Mobile Platform
risk 0.28cvss 4.3epss 0.01
SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of leaking content of files on…
CVE-2020-6307MedJan 14, 2020
SAP
BASIS
risk 0.28cvss 4.3epss 0.01
Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
CVE-2019-0393MedNov 13, 2019
SAP
Quality Management
risk 0.28cvss 4.3epss 0.01
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
CVE-2019-0391MedNov 13, 2019
SAP
Netweaver As Java
risk 0.28cvss 4.3epss 0.01
Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
CVE-2019-0390MedNov 13, 2019
SAP
Data Hub
risk 0.28cvss 4.3epss 0.01
Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
CVE-2019-0367MedOct 8, 2019
SAP
Netweaver Process Integration
risk 0.28cvss 4.3epss 0.01
SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
CVE-2019-0364MedSep 10, 2019
SAP
Hana Extended Application Services
risk 0.28cvss 4.3epss 0.01
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
CVE-2019-0356MedSep 10, 2019
SAP
Netweaver Process Integration
risk 0.28cvss 4.3epss 0.01
Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

Page 31 of 40