SAP SE vulnerabilities, page 3

1,421 vulnerabilities

Known vulnerabilities in SAP SE products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 777 products.

8.1HighCVE-2018-2375sap se · sap hana extended application services +1 moresap se sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.EPSS0.92%7.5HighCVE-2018-2360sap se · sap startup service +1 moresap se sap startup serviceSAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.EPSS2.51%7.5HighCVE-2018-2392sap se · sap internet graphics server +1 moresap se sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.EPSS41.05%8.4HighCVE-2018-2425sap_se · sap business one +1 moresap_se sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.EPSS0.39%7.5HighCVE-2018-2422sap se · sap internet graphics server (igs) +1 moresap se sap internet graphics server (igs)SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.EPSS1.84%8.4HighCVE-2018-2402sap se · sap hana +1 moresap se sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay), user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorizations on the control system may be able to access the user credentials and gain unauthorized access to data in the captured or target system.EPSS1.49%8.8HighCVE-2018-2484sap se · sap enterprise financial services (bank/cfm) +7 moresap se sap enterprise financial services (bank/cfm)SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.EPSS1.37%6.5MediumCVE-2018-2372sap se · sap hana extended application services +1 moresap se sap hana extended application servicesA plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.EPSS0.85%6.5MediumCVE-2018-2387sap se · sap internet graphics server +1 moresap se sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on ports, which is not available to the user otherwise.EPSS0.85%6.5MediumCVE-2018-2403sap se · sap disclosure management +1 moresap se sap disclosure managementUnder certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.EPSS1.13%8.8HighCVE-2018-2409sap se · sap cloud platform connector +1 moresap se sap cloud platform connectorImproper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.EPSS1.19%8.8HighCVE-2018-2413sap se · sap disclosure management +1 moresap se sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.EPSS1.37%8.8HighCVE-2018-2401redwood · sap_business_process_automation +1 moreredwood sap_business_process_automationSAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.EPSS1.59%7.5HighCVE-2018-2373sap se · sap hana extended application services +1 moresap se sap hana extended application servicesUnder certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0.EPSS1.15%6.5MediumCVE-2018-2385sap se · sap internet graphics server +1 moresap se sap internet graphics serverUnder certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.EPSS0.91%6.5MediumCVE-2018-2384sap se · sap internet graphics server +1 moresap se sap internet graphics serverUnder certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.EPSS0.91%5.3MediumCVE-2018-2406sap se · sap crystal reports server, oem edition +1 moresap se sap crystal reports server, oem editionUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.EPSS0.35%8.8HighCVE-2018-2395sap se · sap internet graphics server +1 moresap se sap internet graphics serverUnder certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing image or corrupt other type of files.EPSS1.50%5.3MediumCVE-2018-2370sap se · sap bi launchpad +1 moresap se sap bi launchpadServer Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.EPSS1.20%6.1MediumCVE-2018-2365sap se · sap netweaver portal webdynpro runtime +1 moresap se sap netweaver portal webdynpro runtimeSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.EPSS0.96%