VYPR
← SAP

Vendor CVEs

SAP

All CVEs

1,962 total · sorted by risk
  • CVE-2018-2497LowDec 11, 2018
    SAP
    Hana
    risk 0.18cvss 2.7epss 0.01

    The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.

  • CVE-2017-9843LowJul 12, 2017
    SAP
    Netweaver Abap
    risk 0.18cvss 2.7epss 0.02

    SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP Security Note 2406841.

  • CVE-2025-27432LowMar 11, 2025
    SAP
    Electronic Invoicing for Brazil
    risk 0.16cvss 2.4epss 0.00

    The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certain privileges to gain unauthorized access to each transaction. By executing the specific ABAP method within the ABAP system, an unauthorized attacker could call…

  • CVE-2024-45284LowSep 10, 2024
    SAP
    SLCM transactions
    risk 0.16cvss 2.4epss 0.00

    An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.

  • CVE-2026-58234LowSep 8, 2026
    SAP
    Process Integration
    risk 0.14cvss 2.2epss 0.00

    SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation…

  • CVE-2026-27675LowApr 14, 2026
    SAP
    Landscape Transformation
    risk 0.13cvss 2.0epss 0.00

    SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have…

  • CVE-2024-44114LowSep 10, 2024
    SAP
    NetWeaver Application Server for ABAP
    risk 0.13cvss 2.0epss 0.00

    SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiality of the application.

  • CVE-2010-0219Oct 18, 2010
    Apache
    Axis2
    risk 0.10cvss —epss 0.91

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web…

  • CVE-2008-0621Feb 6, 2008
    SAP
    Saplpd
    risk 0.09cvss —epss 0.73

    Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

  • CVE-2008-0244Jan 12, 2008
    SAP
    Maxdb
    risk 0.09cvss —epss 0.80

    SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.

  • CVE-2007-3605Jul 6, 2007
    SAP
    Enjoysap
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.

  • CVE-2007-3614Jul 6, 2007
    SAP
    DB
    risk 0.09cvss —epss 0.70

    Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other…

  • CVE-2006-4305Aug 30, 2006
    SAP
    DB
    risk 0.09cvss —epss 0.71

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connecting via a WebDBM client.

  • CVE-2009-4988Aug 25, 2010
    SAP
    Business One 2005 A
    risk 0.08cvss —epss 0.66

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000.

  • CVE-2010-2590Dec 22, 2010
    SAP
    Crystal Reports
    risk 0.07cvss —epss 0.47

    Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.

  • CVE-2012-2611May 15, 2012
    SAP
    Netweaver
    risk 0.06cvss —epss 0.44

    The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a…

  • CVE-2007-4475Apr 1, 2009
    SAP
    Sapgui
    risk 0.06cvss —epss 0.40

    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

  • CVE-2007-3624Jul 9, 2007
    SAP
    Message Server
    risk 0.06cvss —epss 0.37

    Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long string in the group parameter to /msgserver/html/group.

  • CVE-2013-3319Aug 16, 2013
    SAP
    Netweaver
    risk 0.05cvss —epss 0.20

    The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.

  • CVE-2008-4830Apr 16, 2009
    SAP
    KWEdit ActiveX control
    risk 0.05cvss —epss 0.28

    Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files…

  • CVE-2014-0995Nov 6, 2014
    SAP
    Netweaver
    risk 0.04cvss —epss 0.10

    The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.

  • CVE-2013-6025Oct 19, 2013
    Sybase
    Adaptive Server Enterprise
    risk 0.04cvss —epss 0.08

    The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an…

  • CVE-2010-1185Mar 29, 2010
    SAP
    Maxdb
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid length parameter in a handshake packet to TCP port 7210. NOTE: some of these details are obtained from third party…

  • CVE-2007-3606Jul 6, 2007
    SAP
    Enjoysap
    risk 0.04cvss —epss 0.08

    Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function.

  • CVE-2006-6010Nov 21, 2006
    SAP
    SAP
    risk 0.04cvss —epss 0.14

    SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than CVE-2003-0747.

  • CVE-2005-3634Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.04cvss —epss 0.18

    frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

  • CVE-2003-0748Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space…

  • CVE-2015-7986Oct 27, 2015
    SAP
    Hana
    risk 0.03cvss —epss 0.06

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

  • CVE-2014-0984Apr 17, 2014
    SAP
    Router
    risk 0.03cvss —epss 0.03

    The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force…

  • CVE-2012-2612May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2514May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2513May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2512May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2012-2511May 15, 2012
    SAP
    Netweaver
    risk 0.03cvss —epss 0.04

    The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

  • CVE-2008-2421May 23, 2008
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under…

  • CVE-2008-2123May 9, 2008
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a…

  • CVE-2007-3608Jul 6, 2007
    SAP
    Enjoysap
    risk 0.03cvss —epss 0.03

    Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors.

  • CVE-2007-3613Jul 6, 2007
    SAP
    Internet Graphics Server
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.

  • CVE-2007-3607Jul 6, 2007
    SAP
    Enjoysap
    risk 0.03cvss —epss 0.04

    Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (process crash) via unspecified vectors.

  • CVE-2006-5784Nov 7, 2006
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.03

    Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by…

  • CVE-2006-5114Oct 3, 2006
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter, different vectors than CVE-2003-0749.

  • CVE-2006-1039Mar 7, 2006
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.03

    SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.

  • CVE-2006-0731Feb 16, 2006
    SAP
    Business Connector
    risk 0.03cvss —epss 0.03

    WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.

  • CVE-2005-3635Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.

  • CVE-2005-3636Nov 16, 2005
    SAP
    Sap Web Application Server
    risk 0.03cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.

  • CVE-2002-1576Apr 15, 2004
    SAP
    DB
    risk 0.03cvss —epss 0.01

    lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

  • CVE-2003-0749Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.

  • CVE-2003-0747Oct 20, 2003
    SAP
    Internet Transaction Server
    risk 0.03cvss —epss 0.03

    wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5)…

  • CVE-2003-0265May 27, 2003
    SAP
    DB
    risk 0.03cvss —epss 0.01

    Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

  • CVE-2015-7828Nov 10, 2015
    SAP
    Hana
    risk 0.01cvss —epss 0.07

    SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8)…

Page 34 of 40