SAP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
181 matching records
- Medium4.5SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths.Check if you run itEPSS 0.32%Aug 12, 2025
- Medium6.1SAP NetWeaver Application Server for ABAP has cross-site scripting vulnerability.Check if you run itEPSS 0.23%Aug 12, 2025
- Low3.5SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link ( ) elements.Check if you run itEPSS 0.21%Aug 12, 2025
- Medium5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated userCheck if you run itEPSS 0.20%Aug 12, 2025
- Medium4.1The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to reaCheck if you run itEPSS 0.13%Aug 12, 2025
- Medium4.3SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection.Check if you run itEPSS 0.26%Aug 12, 2025
- High7.8A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.Check if you run itEPSS 0.44%Jul 10, 2025
- Medium4.1SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration.Check if you run itEPSS 0.27%Jul 8, 2025
- Critical9.1A privilege escalation from host to domain vulnerability was found in the FreeIPA project.Check if you run itEPSS 1.99%Jun 17, 2025
- Medium5.3The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages.Check if you run itEPSS 0.19%Jun 10, 2025
- Medium5.6SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modifyCheck if you run itEPSS 0.24%Jun 10, 2025
- High7.5SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail andCheck if you run itEPSS 0.41%Jun 10, 2025
- High7.5SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then faiCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium6.7Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC deCheck if you run itEPSS 0.43%Jun 10, 2025
- Medium4.3SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks.Check if you run itEPSS 0.22%Jun 10, 2025
- Low3.0Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlledCheck if you run itEPSS 0.22%Jun 10, 2025
- Critical9.6RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.Check if you run itEPSS 0.44%Jun 10, 2025
- Low3.7Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crCheck if you run itEPSS 0.25%Jun 10, 2025
- Medium4.3SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter.Check if you run itEPSS 0.22%Jun 10, 2025
- Medium5.4SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.Check if you run itEPSS 0.26%Jun 10, 2025
- High8.5SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the systemCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.8SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials.Check if you run itEPSS 0.39%Jun 10, 2025
- High7.6SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user.Check if you run itEPSS 0.59%Jun 10, 2025
- Medium5.8Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker could inject malicious JavaScript into a web page through anCheck if you run itEPSS 0.31%Jun 10, 2025
- High8.2SAP BusinessObjects Business Intelligence (BI Workspace) allows an unauthenticated attacker to craft and store malicious script within a workspace.Check if you run itEPSS 0.37%Jun 10, 2025