SAP
Page 13 of 16 — SAP CVEs from a corpus of 1582, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16685 | Medium | 6.1 | 2017-12-12 | Cross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to insufficient encoding… |
CVE-2017-16684 | Critical | 9.8 | 2017-12-12 | SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that re… |
CVE-2017-16683 | Medium | 6.5 | 2017-12-12 | Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a s… |
CVE-2017-16682 | High | 7.2 | 2017-12-12 | SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator creden… |
CVE-2017-16681 | Medium | 6.1 | 2017-12-12 | Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs… |
CVE-2017-16680 | High | 7.5 | 2017-12-12 | Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST endpoints of controller service are miss… |
CVE-2017-16679 | Medium | 6.1 | 2017-12-12 | URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22… |
CVE-2017-16678 | Medium | 4.7 | 2017-12-12 | Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7… |
CVE-2017-14516 | Medium | 6.1 | 2017-12-03 | Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292. |
CVE-2017-15297 | High | 7.5 | 2017-10-16 | SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993. |
CVE-2017-15296 | High | 8.8 | 2017-10-16 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. |
CVE-2017-15295 | Critical | 9.8 | 2017-10-16 | Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064. |
CVE-2017-15294 | Medium | 6.1 | 2017-10-16 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. |
CVE-2017-15293 | Critical | 9.8 | 2017-10-16 | Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on c… |
CVE-2017-10701 | Medium | 6.1 | 2017-09-29 | Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2… |
CVE-2017-14581 | High | 7.5 | 2017-09-19 | The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted reques… |
CVE-2017-14511 | High | 7.5 | 2017-09-17 | An issue was discovered in SAP E-Recruiting (aka ERECRUIT) 605 through 617. When an external applicant registers to the E-Recruiting application, he/she receiv… |
CVE-2015-7241 | Critical | 9.8 | 2017-09-06 | XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01. |
CVE-2014-8871 | High | 7.5 | 2017-08-28 | Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2… |
CVE-2017-12637 | High | 7.5 | 2017-08-07 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers t… |
CVE-2017-11460 | Medium | 6.1 | 2017-07-25 | Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script… |
CVE-2017-11459 | Critical | 9.8 | 2017-07-25 | SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code v… |
CVE-2017-11458 | Medium | 6.1 | 2017-07-25 | Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web scrip… |
CVE-2017-11457 | Medium | 6.5 | 2017-07-25 | XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct… |
CVE-2017-9845 | High | 7.5 | 2017-07-12 | disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka SA… |
CVE-2017-9844 | High | 7.5 | 2017-07-12 | SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in… |
CVE-2017-9843 | Low | 2.7 | 2017-07-12 | SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+wo… |
CVE-2017-9613 | Medium | 5.4 | 2017-06-15 | Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbitrary web script or… |
CVE-2016-6256 | Critical | 9.6 | 2017-05-26 | SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exe… |
CVE-2017-8915 | High | 7.5 | 2017-05-23 | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package… |
CVE-2017-8914 | High | 8.3 | 2017-05-23 | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation p… |
CVE-2017-8913 | High | 8.8 | 2017-05-23 | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a cra… |
CVE-2017-8852 | High | 7.8 | 2017-05-10 | SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote sour… |
CVE-2017-7717 | High | 8.8 | 2017-04-14 | SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execut… |
CVE-2017-7696 | High | 7.5 | 2017-04-14 | SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width a… |
CVE-2016-6818 | Critical | 9.8 | 2017-04-13 | SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cau… |
CVE-2016-6143 | Critical | 9.8 | 2017-04-13 | SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806. |
CVE-2017-7691 | Critical | 9.8 | 2017-04-11 | A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. |
CVE-2016-10311 | Critical | 9.8 | 2017-04-10 | Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTAR… |
CVE-2016-10310 | Medium | 4.9 | 2017-04-10 | Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denia… |
CVE-2016-10304 | Medium | 6.5 | 2017-04-10 | The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service (out-of-memory error and service insta… |
CVE-2017-6950 | Critical | 9.8 | 2017-03-23 | SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions and execute arbitrary code via a crafted ABAP code, aka SAP Sec… |
CVE-2017-6061 | Medium | 4.7 | 2017-03-16 | Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arb… |
CVE-2017-5997 | High | 7.5 | 2017-02-15 | The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and process crash) via mult… |
CVE-2016-10079 | High | 7.5 | 2017-02-01 | SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a long string to TCP port 515. |
CVE-2017-5372 | High | 7.5 | 2017-01-23 | The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by leve… |
CVE-2016-6859 | Medium | 4.3 | 2016-12-31 | Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java… |
CVE-2016-6858 | Medium | 5.4 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0… |
CVE-2016-6857 | Medium | 5.4 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.1… |
CVE-2016-6856 | Medium | 6.1 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inj… |
CVE-2016-10005 | High | 7.5 | 2016-12-19 | Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd… |
CVE-2016-3685 | Medium | 4.7 | 2016-12-14 | SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context-dependent attacker… |
CVE-2016-3684 | Medium | 4.7 | 2016-12-14 | SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive c… |
CVE-2016-9563 | Medium | 6.5 | 2016-11-23 | BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~… |
CVE-2016-9562 | High | 7.5 | 2016-11-23 | SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4… |
CVE-2016-7437 | Low | 3.3 | 2016-10-13 | SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected att… |
CVE-2016-4407 | Medium | 6.5 | 2016-10-13 | The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitr… |
CVE-2016-3946 | High | 7.8 | 2016-10-13 | SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461. |
CVE-2016-3638 | Medium | 5.5 | 2016-10-13 | SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process termination) via a crafted HOST parame… |
CVE-2016-3635 | High | 7.5 | 2016-10-13 | SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function… |
CVE-2016-7435 | Critical | 9.1 | 2016-10-05 | The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 a… |
CVE-2016-4551 | High | 7.5 | 2016-10-05 | The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Securi… |
CVE-2016-6146 | Medium | 5.3 | 2016-09-27 | The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226. |
CVE-2016-6137 | Critical | 9.8 | 2016-09-27 | An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 220359… |
CVE-2016-6142 | High | 7.5 | 2016-09-26 | SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL prot… |
CVE-2016-3639 | Medium | 4.3 | 2016-09-26 | SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP Security Note 2176… |
CVE-2016-5847 | Medium | 5.8 | 2016-08-13 | SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an a… |
CVE-2016-5845 | Medium | 5.5 | 2016-08-13 | SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash)… |
CVE-2016-6150 | Critical | 9.8 | 2016-08-05 | The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restr… |
CVE-2016-6149 | Medium | 5.5 | 2016-08-05 | SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Not… |
CVE-2016-6148 | High | 7.5 | 2016-08-05 | SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IM… |
CVE-2016-6147 | Critical | 9.8 | 2016-08-05 | An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors… |
CVE-2016-6145 | Medium | 5.3 | 2016-08-05 | The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists an… |
CVE-2016-6144 | High | 8.1 | 2016-08-05 | The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the password_lock_for_system_user is not… |
CVE-2016-6140 | Critical | 9.8 | 2016-08-05 | SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591. |
CVE-2016-6139 | Critical | 9.8 | 2016-08-05 | SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2203591. |
CVE-2016-6138 | Critical | 9.8 | 2016-08-05 | Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, aka SAP Security Note 2… |
CVE-2016-3640 | Medium | 5.5 | 2016-08-05 | The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via v… |
CVE-2010-5326 | Critical | 10.0 | 2016-05-13 | The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to… |
CVE-2016-4018 | High | 7.3 | 2016-04-14 | The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sens… |
CVE-2016-4017 | High | 7.5 | 2016-04-14 | The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Se… |
CVE-2016-4016 | Medium | 6.1 | 2016-04-14 | Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitr… |
CVE-2016-4015 | High | 7.5 | 2016-04-14 | The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP… |
CVE-2016-4014 | High | 8.6 | 2016-04-14 | XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) v… |
CVE-2016-3980 | High | 7.5 | 2016-04-08 | The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP… |
CVE-2016-3979 | High | 7.5 | 2016-04-08 | Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (heap memory corruption a… |
CVE-2015-8840 | High | 8.8 | 2016-04-08 | The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive inf… |
CVE-2016-3976 | High | 7.5 | 2016-04-07 | Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the… |
CVE-2016-3975 | Medium | 6.1 | 2016-04-07 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the naviga… |
CVE-2016-3974 | Critical | 9.1 | 2016-04-07 | XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of servi… |
CVE-2016-3973 | Medium | 5.3 | 2016-04-07 | The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive… |
CVE-2016-2536 | High | 8.8 | 2016-02-22 | Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. N… |
CVE-2016-2389 | High | 7.5 | 2016-02-16 | Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4… |
CVE-2016-2388 | Medium | 5.3 | 2016-02-16 | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka… |
CVE-2016-2387 | Medium | 6.1 | 2016-02-16 | Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject arbitra… |
CVE-2016-2386 | Critical | 9.8 | 2016-02-16 | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vect… |
CVE-2016-1929 | Critical | 9.3 | 2016-01-20 | The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process… |
CVE-2016-1928 | Critical | 9.8 | 2016-01-20 | Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP re… |
CVE-2016-1911 | Medium | 6.1 | 2016-01-15 | Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to t… |
CVE-2016-1910 | Medium | 5.3 | 2016-01-15 | The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290. |