SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-33009SQL injection vulnerability in SAP Global Label Management (GLM)
- CVE-2024-34687Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform
- CVE-2024-4138Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- CVE-2024-4139Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- CVE-2024-28165Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2024-33002Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)
- CVE-2024-33000Missing Authorization check in SAP Bank Account Management
- CVE-2024-33008Memory Corruption vulnerability in SAP Replication Server
- CVE-2024-33007Client-side script execution vulnerability in SAP UI5(PDFViewer)
- CVE-2024-32733Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2024-32731Missing Authorization check in SAP My Travel Requests
- CVE-2024-32730Missing authorization check in SAP Enable Now Manager
- CVE-2024-30218Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2024-30217Missing Authorization check in SAP S/4 HANA (Cash Management)
- CVE-2024-30216Missing Authorization check in SAP S/4 HANA (Cash Management)
- CVE-2024-30215Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- CVE-2024-30214Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- CVE-2024-28167Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)
- CVE-2024-27901Directory Traversal vulnerability in SAP Asset Accounting
- CVE-2024-27899Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine
- CVE-2024-27898Server-Side Request Forgery in SAP NetWeaver
- CVE-2024-25646Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence
- CVE-2024-25645Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)
- CVE-2024-28163Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)
- CVE-2024-27902Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)
- CVE-2024-27900Missing Authorization check in SAP ABAP Platform
- CVE-2024-25644Information Disclosure vulnerability in NetWeaver (WSRM)
- CVE-2024-22133Improper Access Control in SAP Fiori Front End Server
- CVE-2024-22127Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
- CVE-2024-24741Missing Authorization check in SAP Master Data Governance Material