SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-33988Cross-Site Scripting vulnerability in SAP Enable Now
- CVE-2023-33987Request smuggling and request concatenation in SAP Web Dispatcher
- CVE-2023-31405Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)
- CVE-2023-33991Stored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant Management
- CVE-2023-33986Cross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management)
- CVE-2023-33985Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- CVE-2023-33984Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)
- CVE-2023-32115SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)
- CVE-2023-32114Denial of Service in SAP NetWeaver
- CVE-2023-2827Missing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital
- CVE-2023-32112Missing Authorization Check in Vendor Master Hierarchy
- CVE-2023-32113Information Disclosure vulnerability in SAP GUI for Windows
- CVE-2023-32111Memory Corruption vulnerability in SAP PowerDesigner (Proxy)
- CVE-2023-31407Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation
- CVE-2023-31406Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-31404Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)
- CVE-2023-30744Improper access control during application start-up in SAP AS NetWeaver JAVA.
- CVE-2023-30743Improper Neutralization of Input in SAPUI5
- CVE-2023-30742Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)
- CVE-2023-30741Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-30740Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-29188Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI
- CVE-2023-28764Information Disclosure vulnerability in SAP BusinessObjects Platform
- CVE-2023-28762Information Disclosure in SAP BusinessObjects Intelligence Platform
- CVE-2023-29189HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
- CVE-2023-29187DLL Hijacking vulnerability in SapSetup (Software Installation Program)
- CVE-2023-29186Directory/Path Traversal vulnerability in SAP NetWeaver.
- CVE-2023-29185Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
- CVE-2023-29112Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)
- CVE-2023-29111Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)