Browse CVEs

MEDIUM 5.0 CVE-2013-3319EPSS 20% The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted S… Netweaver Mitigation only Fix from $1,6002013-08-16 MEDIUM 6.5 CVE-2013-3062 The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated … Production Planning And Control Mitigation only Fix from $1,6002013-05-01 MEDIUM 6.0 CVE-2013-3063 SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Basis Communication Services No fix yet Fix from $1,6002013-05-01 MEDIUM 6.5 CVE-2013-3061 The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the S… Erp Central Component Mitigation only Fix from $1,6002013-05-01 MEDIUM 6.9 CVE-2011-5154 Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privile… Graphical User Interface Mitigation only Fix from $1,6002012-09-06 HIGH 10.0 CVE-2012-4341EPSS 9% Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and exe… Netweaver Abap Mitigation only Fix from $1,9502012-08-15 HIGH 9.3 CVE-2012-2611EPSS 42% The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EH… Netweaver No fix yet Fix from $1,9502012-05-15 MEDIUM 5.0 CVE-2012-2511 The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote… Netweaver No fix yet Fix from $1,6002012-05-15 MEDIUM 5.0 CVE-2012-2512 The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remo… Netweaver No fix yet Fix from $1,6002012-05-15 MEDIUM 5.0 CVE-2012-2513 The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote atta… Netweaver No fix yet Fix from $1,6002012-05-15 MEDIUM 5.0 CVE-2012-2514 The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remo… Netweaver No fix yet Fix from $1,6002012-05-15 MEDIUM 5.0 CVE-2012-2612 The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote a… Netweaver No fix yet Fix from $1,6002012-05-15 MEDIUM 5.0 CVE-2012-1291 Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive in… Netweaver Mitigation only Fix from $1,6002012-02-23 MEDIUM 5.0 CVE-2012-1292 Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Messa… Netweaver Mitigation only Fix from $1,6002012-02-23 HIGH 9.3 CVE-2010-2590EPSS 47% Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 S… Crystal Reports No fix yet Fix from $1,9502010-12-22 HIGH 9.3 CVE-2010-4556EPSS 6% Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to exec… Netweaver Business Client Mitigation only Fix from $1,9502010-12-17 HIGH 9.0 CVE-2010-3983 CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and… Businessobjects No fix yet Fix from $1,9502010-10-18 MEDIUM 5.0 CVE-2010-3979 Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid use… Businessobjects No fix yet Fix from $1,6002010-10-18 MEDIUM 5.0 CVE-2010-3982 SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentia… Businessobjects No fix yet Fix from $1,6002010-10-18 HIGH 10.0 CVE-2009-4988EPSS 66% Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary co… Business One 2005 A No fix yet Fix from $1,9502010-08-25 HIGH 10.0 CVE-2010-3032EPSS 6% Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers… Crystal Reports Mitigation only Fix from $1,9502010-08-17 HIGH 10.0 CVE-2010-1185EPSS 15% Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an i… Maxdb No fix yet Fix from $1,9502010-03-29 MEDIUM 5.0 CVE-2009-4603 Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Appli… Sap Kernel Mitigation only Fix from $1,6002010-01-12 HIGH 10.0 CVE-2009-3345 Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco… Crystal Reports Server No fix yet Fix from $1,9502009-09-24 HIGH 10.0 CVE-2009-3346 Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated b… Crystal Reports Server No fix yet Fix from $1,9502009-09-24 MEDIUM 5.0 CVE-2009-3344 Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown … Crystal Reports Server No fix yet Fix from $1,6002009-09-24 HIGH 9.3 CVE-2008-4387EPSS 16% Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unk… Sapgui Mitigation only Fix from $1,9502008-11-10 HIGH 9.3 CVE-2008-0307 Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown… Maxdb Mitigation only Fix from $1,9502008-03-11 MEDIUM 6.9 CVE-2008-0306 sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment vari… Maxdb Mitigation only Fix from $1,6002008-03-11 HIGH 7.8 CVE-2006-7220 Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain print jo… Saplpd Mitigation only Fix from $1,9502007-07-10