SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-47585Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-47582XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
- CVE-2024-47581Missing Authorization check in SAP HCM (Approve Timesheets version 4)
- CVE-2024-47580Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
- CVE-2024-47579Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
- CVE-2024-47578Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
- CVE-2024-47577Information Disclosure vulnerability in SAP Commerce Cloud
- CVE-2024-47576DLL Hijacking vulnerability in SAP Product Lifecycle Costing
- CVE-2024-32732Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform
- CVE-2024-47595Local Privilege Escalation in SAP Host Agent
- CVE-2024-47593Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-47592Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)
- CVE-2024-47590Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher
- CVE-2024-47588Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)
- CVE-2024-47587Missing authorization check in SAP Cash Management (Cash Operations)
- CVE-2024-47586NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-42372Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)
- CVE-2024-47594Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)
- CVE-2024-45282HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)
- CVE-2024-45278Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice
- CVE-2024-45277Prototype Pollution vulnerability in SAP HANA Client
- CVE-2024-37179Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
- CVE-2024-45285Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-45284Missing authorization check in SAP Student Life Cycle Management (SLcM)
- CVE-2024-45283Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)
- CVE-2024-45281DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-45280Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)
- CVE-2024-45279Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel)
- CVE-2024-44121Information Disclosure in SAP S/4 HANA (Statutory Reports)
- CVE-2024-44120Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal