SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-37180[CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-39596[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now
- CVE-2024-39599[CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2024-37171[CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal)
- CVE-2024-39600[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows
- CVE-2024-34689[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)
- CVE-2024-37172[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)
- CVE-2024-39595[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation
- CVE-2024-39594[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation
- CVE-2024-37175[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
- CVE-2024-39598[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
- CVE-2024-37174[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
- CVE-2024-37173[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
- CVE-2024-34685[CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor
- CVE-2024-39593[CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management
- CVE-2024-39597[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce
- CVE-2024-39592[CVE-2024-39592] Missing Authorization check in SAP PDCE
- CVE-2024-34691Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)
- CVE-2024-34684Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)
- CVE-2024-28164Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
- CVE-2024-34690Missing Authorization check in SAP Student Life Cycle Management (SLcM)
- CVE-2024-37176Missing Authorization check in SAP BW/4HANA Transformation and DTP
- CVE-2024-34686Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
- CVE-2024-34683Unrestricted file upload in SAP Document Builder (HTTP service)
- CVE-2024-33001Denial of service (DOS) in SAP NetWeaver and ABAP platform
- CVE-2024-34688Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
- CVE-2024-37178Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation
- CVE-2024-37177Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation
- CVE-2024-33006File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-33004Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)