Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query.EPSS 0.3%Oct 13, 2026
- Critical10.0The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.EPSS 0.3%Oct 13, 2026
- Critical9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.EPSS 0.3%Oct 13, 2026
- Critical9.1SAP NetWeaver Deserialization VulnerabilityKEVEPSS 12.7%May 12, 2025
- Critical9.8SAP NetWeaver Unrestricted File Upload VulnerabilityKEVEPSS 99.5%Apr 24, 2025
- Critical10.0SAP Multiple Products HTTP Request Smuggling VulnerabilityKEVEPSS 97.9%Feb 9, 2022
- High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityKEVEPSS 36.9%Sep 14, 2021
- Critical10.0SAP NetWeaver Missing Authentication for Critical Function VulnerabilityKEVEPSS 94.7%Jul 14, 2020
- Critical9.8SAP Solution Manager Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.1%Mar 10, 2020
- Critical9.8SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityKEVEPSS 7.1%Aug 14, 2019
- Medium6.6SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityKEVEPSS 28.9%Mar 1, 2018
- High7.5SAP NetWeaver Directory Traversal VulnerabilityKEVEPSS 95.1%Aug 7, 2017
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityKEVEPSS 24.2%Nov 22, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityKEVEPSS 17.8%May 13, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityKEVEPSS 47.3%Apr 7, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityKEVEPSS 52.2%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityKEVEPSS 71.5%Feb 16, 2016
17 records · page 1 of 1
PreviousNext