SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-29110Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)
- CVE-2023-29109Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)
- CVE-2023-29108IP filter vulnerability in ABAP Platform and SAP Web Dispatcher
- CVE-2023-28765Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )
- CVE-2023-28763Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-28761Missing Authentication check in SAP NetWeaver Enterprise Portal
- CVE-2023-27897Code Injection vulnerability in SAP CRM
- CVE-2023-27499Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML
- CVE-2023-27497Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)
- CVE-2023-27267Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)
- CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management
- CVE-2023-24527Improper Access Control in SAP NetWeaver AS Java for Deploy Service
- CVE-2023-1903Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)
- CVE-2023-27895Information Disclosure vulnerability in SAP Authenticator for Android
- CVE-2023-27893Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)
- CVE-2023-27501Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-27500Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-27498Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)
- CVE-2023-27894Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27896Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27271Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27270Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-27269Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-27268Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)
- CVE-2023-26461XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)
- CVE-2023-26460Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)
- CVE-2023-26457Cross-Site Scripting (XSS) vulnerability in SAP Content Server
- CVE-2023-25618Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-26459Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-25617OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)