Sap Security Vulnerabilities (CVEs)

CVE-2022-28773 is an uncontrolled recursion vulnerability in SAP Web Dispatcher and SAP Internet Communication Manager that can cause a denial of serv...

CVE-2022-27667 is an information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform's Client Management Console (CMC). It ...

CVE-2022-28772 is a stack-based buffer overflow vulnerability in SAP Web Dispatcher and Internet Communication Manager. Attackers can send overlong in...

CVE-2022-27658 is an information disclosure vulnerability in SAP Innovation Management 2.0 that allows attackers to access sensitive information under...

CVE-2022-24396 is an authentication bypass vulnerability in SAP FRUN Simple Diagnostics Agent versions 1.0 through 1.57. Attackers can access administ...

CVE-2022-22540 is an SQL injection vulnerability in SAP NetWeaver AS ABAP Workplace Server that allows attackers to execute crafted database queries. ...

CVE-2022-22543 is a denial-of-service vulnerability in SAP NetWeaver ABAP Kernel where insufficient validation of SAP-Passport information allows unau...

This vulnerability in SAP S/4HANA's F0743 Create Single Payment application allows attackers with basic user rights to upload malicious files without ...

This vulnerability in SAP GRC Access Control allows authenticated users to bypass authorization checks, potentially escalating their privileges within...

CVE-2021-40501 is an authorization bypass vulnerability in SAP ABAP Platform Kernel that allows authenticated business users to escalate privileges an...

This vulnerability in SAP GUI for Windows allows attackers with local client-side privileges to obtain password-equivalent credentials. Affected users...

CVE-2021-38181 is a denial-of-service vulnerability in SAP NetWeaver AS ABAP and ABAP Platform that allows attackers to crash or flood services, preve...

CVE-2021-33692 is a path traversal vulnerability in SAP Cloud Connector that allows attackers to upload malicious zip backup files containing director...

This vulnerability allows authenticated users with business authorization in SAP Business One to upload arbitrary files, including malicious scripts, ...

CVE-2021-33705 is a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Portal's Iviews Editor component that allows unauthenticated att...

This CVE describes an SQL injection vulnerability in SAP systems where authenticated users with specific privileges can execute manipulated queries or...

CVE-2021-37531 is an XSLT injection vulnerability in SAP NetWeaver Knowledge Management XML Forms that allows authenticated non-administrative users t...

This vulnerability allows remote attackers to write arbitrary files to the SAP BusinessObjects Edge 4.0 File Repository Server via a full pathname in ...

CVE-2021-33670 is a denial-of-service vulnerability in SAP NetWeaver AS for Java's HTTP Service Monitoring Filter. Attackers can crash the filter by s...

CVE-2021-33676 is a missing authority check vulnerability in SAP CRM that allows authenticated attackers with high privileges to bypass authorization ...

CVE-2021-33669 is an insecure temporary file vulnerability in SAP Mobile SDK Certificate Provider that allows local unprivileged attackers to exploit ...

CVE-2021-27630 is a denial-of-service vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server. An unauthenticated attacker can sen...

CVE-2021-27632 is a denial-of-service vulnerability in SAP NetWeaver ABAP Server and ABAP Platform's Enqueue Server. An unauthenticated attacker can s...

CVE-2021-27597 is a denial-of-service vulnerability in SAP NetWeaver AS for ABAP RFC Gateway caused by improper input validation in the memmove() meth...

CVE-2021-27607 is a denial-of-service vulnerability in SAP NetWeaver ABAP Server and ABAP Platform that allows unauthenticated attackers to crash the ...

CVE-2021-27628 is a denial-of-service vulnerability in SAP NetWeaver ABAP Server and ABAP Platform that allows unauthenticated attackers to crash the ...

CVE-2021-33668 is an LDAP injection vulnerability in SAP's SCIMono software that allows unauthenticated attackers to inject malicious LDAP queries. Th...

This vulnerability in SAP Business One Chef cookbook allows attackers to access sensitive payroll data through insecure temporary folder permissions. ...

CVE-2021-27616 is an information disclosure vulnerability in SAP Business One Hana Chef Cookbook that allows attackers to access restricted informatio...

CVE-2021-27608 is an unquoted service path vulnerability in SAPSetup version 9.0 that allows local attackers to escalate privileges during installatio...

CVE-2021-21482 allows unauthorized attackers on the same network subnet as SAP NetWeaver MDM servers to brute-force administrative passwords. Successf...

This vulnerability in SAP 3D Visual Enterprise Viewer version 9 allows attackers to cause a denial of service by crashing the application when users o...

CVE-2021-27587 is a denial-of-service vulnerability in SAP 3D Visual Enterprise Viewer version 9 that crashes the application when opening malicious J...

CVE-2021-27589 is a denial-of-service vulnerability in SAP 3D Visual Enterprise Viewer version 9. When users open malicious SVG files, the application...

CVE-2021-27591 is a denial-of-service vulnerability in SAP 3D Visual Enterprise Viewer version 9. When users open specially crafted PDF files, the app...