Browse CVEs

MEDIUM 5.3 CVE-2019-0318 Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker… Netweaver Application Server Java Mitigation only Fix from $1,6002019-07-10 MEDIUM 6.1 CVE-2019-0303 SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested… Businessobjects Mitigation only Fix from $1,6002019-06-14 HIGH 7.5 CVE-2019-0315 Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31,… Netweaver Process Integration Mitigation only Fix from $1,9502019-06-12 MEDIUM 6.1 CVE-2019-0311 Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-contr… R\/3 Enterprise Mitigation only Fix from $1,6002019-06-12 MEDIUM 5.5 CVE-2019-0314 SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a ser… Work Manager Mitigation only Fix from $1,6002019-06-12 MEDIUM 5.3 CVE-2019-0312 Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to… Netweaver Process Integration Mitigation only Fix from $1,6002019-06-12 CRITICAL 9.8 CVE-2019-0304 FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.… Advanced Business Application Programming Platform Kernel Mitigation only Fix from $2,3002019-06-12 MEDIUM 6.8 CVE-2019-0308 An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price of the pro… E Commerce Mitigation only Fix from $1,6002019-06-12 HIGH 8.8 CVE-2019-0301 Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface … Identity Management Mitigation only Fix from $1,9502019-05-14 HIGH 8.8 CVE-2019-0280 SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform nec… Treasury And Risk Management Mitigation only Fix from $1,9502019-05-14 HIGH 7.6 CVE-2019-0287 Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to … Businessobjects No fix yet Fix from $1,9502019-05-14 HIGH 7.1 CVE-2019-0289 Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access i… Businessobjects Mitigation only Fix from $1,9502019-05-14 MEDIUM 6.5 CVE-2019-0293 Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC de… Sap Solution Manager System Mitigation only Fix from $1,6002019-05-14 MEDIUM 6.1 CVE-2019-0298 SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulner… E Commerce Mitigation only Fix from $1,6002019-05-14 MEDIUM 5.5 CVE-2019-0291 Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted. Solution Manager No fix yet Fix from $1,6002019-05-14 CRITICAL 9.8 CVE-2019-0285EPSS 7% The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including crede… Crystal Reports No fix yet Fix from $2,3002019-04-10 HIGH 8.8 CVE-2019-0279 ABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and INST_CREATE_TCPIP_RFC_DEST in SAP BASIS (fixed in versions 7.0 to… Business Application Software Integrated Solution after 7.53 Fix from $1,9502019-04-10 HIGH 7.1 CVE-2019-0283 SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofi… Netweaver Process Integration Mitigation only Fix from $1,9502019-04-10 MEDIUM 6.0 CVE-2019-0284 SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attac… Hana Mitigation only Fix from $1,6002019-04-10 MEDIUM 5.3 CVE-2019-0282 Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed w… Netweaver Process Integration Mitigation only Fix from $1,6002019-04-10 HIGH 8.8 CVE-2019-0270 ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of p… Advanced Business Application Programming Platform Kernel Mitigation only Fix from $1,9502019-03-12 HIGH 8.8 CVE-2019-0276 Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorizatio… Banking Services From Sap Mitigation only Fix from $1,9502019-03-12 HIGH 8.1 CVE-2019-0268 SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepte… Businessobjects Business Intelligence Mitigation only Fix from $1,9502019-03-12 HIGH 7.5 CVE-2019-0274 SAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service (i.e. den… Mobile Platform Sdk Mitigation only Fix from $1,9502019-03-12 MEDIUM 6.5 CVE-2019-0271 ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, lea… Advanced Business Application Programming Platform after 7.52 Fix from $1,6002019-03-12 MEDIUM 6.5 CVE-2019-0277 SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer w… Hana Extended Application Services Mitigation only Fix from $1,6002019-03-12 MEDIUM 5.4 CVE-2019-0269 SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resul… Businessobjects Business Intelligence Mitigation only Fix from $1,6002019-03-12 MEDIUM 5.4 CVE-2019-0275 SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not … Netweaver Application Server Java after 7.11 Fix from $1,6002019-03-12 HIGH 8.8 CVE-2019-0267 SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This… Manufacturing Integration And Intelligence Mitigation only Fix from $1,9502019-02-15 HIGH 7.5 CVE-2019-0266 Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a … Hana Extended Application Services Mitigation only Fix from $1,9502019-02-15