SAP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
181 matching records
- Medium4.3SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker cCheck if you run itEPSS 0.28%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- UnknownSAP knowledge_warehouse Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.40%Apr 18, 2024
- UnknownSAP businessobjects_business_intelligence_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.74%Feb 14, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- Medium6.1SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WE…Check if you run itEPSS 0.44%May 9, 2023
- Medium6.1Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to u…Check if you run itEPSS 0.39%May 9, 2023
- Medium6.5SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabiliti…Check if you run itEPSS 0.61%Mar 14, 2023
- Medium6.1Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an una…Check if you run itEPSS 0.39%Feb 14, 2023
- Medium5.4SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be us…Check if you run itEPSS 0.34%Feb 14, 2023
- Critical10.0SAP Multiple Products HTTP Request Smuggling VulnerabilityPatch nowKEVEPSS 97.95%Feb 9, 2022
- High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 36.90%Sep 14, 2021
- Medium6.1SAP Solution Manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.20%Dec 9, 2020
- Medium5.3SAP netweaver_application_server_java Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.68%Jul 14, 2020
- Critical10.0SAP NetWeaver Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 94.72%Jul 14, 2020
- Critical9.8SAP Solution Manager Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.13%Mar 10, 2020
- Critical9.8SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 7.47%Aug 14, 2019
- Medium6.6SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityPatch nowKEVEPSS 28.93%Mar 1, 2018
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 95.11%Aug 7, 2017
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016