Sap vulnerabilities, page 5

1,560 vulnerabilities

Known vulnerabilities in Sap products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 544 products.

7.5HighCVE-2018-2471sap · businessobjects_business_intelligence_platform +1 moresap businessobjects_business_intelligence_platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.EPSS1.73%7.4HighCVE-2018-2503sap · netweaver_application_server_java +1 moresap netweaver_application_server_javaBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This has been fixed in SAP NetWeaver AS Java (ServerCore versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50).EPSS0.57%6.5MediumCVE-2018-2390sap · internet_graphics_serversap internet_graphics_serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service.EPSS0.91%6.1MediumCVE-2018-2464sap · netweaver +1 moresap netweaverSAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting (XSS) vulnerability.EPSS1.32%8.8HighCVE-2018-2381sap se · sap erp financials information system +1 moresap se sap erp financials information systemSAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.EPSS1.24%8.3HighCVE-2018-2487sap · disclosure_management +1 moresap disclosure_managementSAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, files within this zip file can land in different locations than the originally intended extraction point.EPSS1.52%9.8CriticalCVE-2018-2424sap_se · sap hana database +8 moresap_se sap hana databaseSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00EPSS2.28%7.5HighCVE-2018-2393sap se · sap internet graphics server +1 moresap se sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.EPSS15.46%9.8CriticalCVE-2018-2404sap se · sap disclosure management +1 moresap se sap disclosure managementSAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.EPSS1.85%7.8HighCVE-2018-2489sap · fiori_client +1 moresap fiori_clientLocally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.EPSS0.87%8.5HighCVE-2018-2475gardener +1 moregardener gardenerFollowing the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing network isolation a shoot's apiserver can access services/endpoints in the private network of its corresponding seed cluster. Combined with other minor Kubernetes security issues, the missing network isolation theoretically can lead to compromise other shoot or seed clusters in the "Gardener" context. The issue is rated high due to the high impact of a potential exploitation in "Gardener" context. This was fixed in Gardener release 0.12.4.EPSS1.35%9.8CriticalCVE-2018-2368sap se · sap netweaver system landscape directory, lm-core +1 moresap se sap netweaver system landscape directory, lm-coreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.EPSS2.50%6.5MediumCVE-2018-2379sap se · sap hana extended application services +1 moresap se sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.EPSS0.89%6.1MediumCVE-2018-2435sap · netweaver_enterprise_portal +1 moresap netweaver_enterprise_portalSAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.EPSS1.32%7.2HighCVE-2018-2478sap · basis +1 moresap basisAn attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user.EPSS1.83%5.4MediumCVE-2018-2405sap_se · sap solution manager +1 moresap_se sap solution managerSAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.EPSS0.92%7.5HighCVE-2018-2458sap · business_one +1 moresap business_oneUnder certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.EPSS1.73%6.1MediumCVE-2018-2452sap · netweaver_application_server_java +1 moresap netweaver_application_server_javaThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user-controlled inputs, resulting in a cross-site scripting (XSS) vulnerability.EPSS1.42%6.5MediumCVE-2018-2474sap · fiori +1 moresap fioriSAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.EPSS0.67%9.8CriticalCVE-2018-2420sap se · sap internet graphics server (igs) +1 moresap se sap internet graphics server (igs)SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.EPSS1.49%