Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.Check if you run itEPSS 0.16%Aug 12, 2025
- Medium6.7ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation.Check if you run itEPSS 0.15%Aug 12, 2025
- Medium5.1During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was disCheck if you run itEPSS 0.17%Aug 12, 2025
- Critical9.8The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all veCheck if you run itEPSS 0.50%Aug 12, 2025
- Medium6.4The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitCheck if you run itEPSS 0.27%Aug 12, 2025
- Medium6.4The RT Easy Builder – Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and includCheck if you run itEPSS 0.21%Aug 12, 2025
- High8.1The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versionsCheck if you run itEPSS 0.86%Aug 12, 2025
- High8.1SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory coCheck if you run itEPSS 0.42%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server ABAP (BIC Document) allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a maliciousCheck if you run itEPSS 0.26%Aug 12, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Aug 12, 2025
- Low3.5Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for tesCheck if you run itEPSS 0.46%Aug 12, 2025
- High8.8Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invoking the corresponding API.�As a result ,Check if you run itEPSS 0.49%Aug 12, 2025
- Critical9.9SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC.Check if you run itEPSS 0.70%Aug 12, 2025
- Medium4.9Due to a missing authorization check in the ABAP Platform, an authenticated user with elevated privileges could bypass authorization restrictions for common transactions by leveragCheck if you run itEPSS 0.32%Aug 12, 2025
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible.Check if you run itEPSS 0.23%Aug 12, 2025
- Medium6.9Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction and method in Bank CoCheck if you run itEPSS 0.95%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server ABAP has HTML injection vulnerability.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium4.5SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths.Check if you run itEPSS 0.32%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability.Check if you run itEPSS 0.23%Aug 12, 2025
- Low3.5SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link ( ) elements.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated userCheck if you run itEPSS 0.20%Aug 12, 2025
- Medium4.1The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to reaCheck if you run itEPSS 0.13%Aug 12, 2025
- Medium4.3SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection.Check if you run itEPSS 0.26%Aug 12, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 70.11%Aug 12, 2025
- Critical9.8Fortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 65.30%Aug 12, 2025
Sort