SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-44117Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-44112Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution)
- CVE-2024-41728Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-45286Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)
- CVE-2024-44116Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-44115Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-44114Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-44113Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)
- CVE-2024-42380Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-42378Cross-Site Scripting (XSS) in eProcurement on S/4HANA
- CVE-2024-42371Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-41729Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
- CVE-2024-39591Missing Authorization check in SAP Document Builder
- CVE-2024-42373Missing Authorization Check in SAP Student Life Cycle Management (SLcM)
- CVE-2024-41734Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-41736Information Disclosure vulnerability in SAP Permit to Work
- CVE-2024-41731Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-28166Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-42375Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-41732Improper Access Control in SAP Netweaver Application Server ABAP
- CVE-2024-41737Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)
- CVE-2024-41733Information Disclosure Vulnerability in SAP Commerce
- CVE-2024-41735Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice
- CVE-2024-33005Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
- CVE-2024-42377Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework
- CVE-2024-42376Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework
- CVE-2024-33003Information Disclosure Vulnerability in SAP Commerce Cloud
- CVE-2024-42374XML injection in SAP BEx Web Java Runtime Export Web Service
- CVE-2024-41730Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-34692[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now