Export limit exceeded: 16012 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (132 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-76965 | 2 Sap, Sap Se | 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform | 2026-11-10 | 9.9 Critical |
| SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system. | ||||
| CVE-2026-76966 | 2 Sap, Sap Se | 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform | 2026-11-10 | 8.9 High |
| Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on confidentiality and integrity with low impact on availability of the application. | ||||
| CVE-2026-76970 | 2 Sap, Sap Se | 2 Sap Netweaver And Abap Platform, Sap Netweaver And Abap Platform | 2026-11-10 | 7.5 High |
| Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigger a memory corruption condition in the parsing routine, which could cause the affected processes to crash and restart. By repeatedly sending such requests, the attacker could cause a sustained denial of service, leading to a high impact on availability. Confidentiality and integrity remain unaffected. | ||||
| CVE-2026-44768 | 1 Sap Se | 1 Sap Webclient Ui | 2026-11-10 | 4.1 Medium |
| SAP WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy (CSP) configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application. Confidentiality and availability are not impacted. | ||||
| CVE-2026-24317 | 1 Sap Se | 1 Sap Gui For Windows With Active Guixt | 2026-11-03 | 5 Medium |
| SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directories. The malicious command is executed in the victim user's context provided GuiXT is enabled. This vulnerability has a low impact on confidentiality, integrity, and availability. | ||||
| CVE-2026-89111 | 1 Sap Se | 1 Sap Cloud | 2026-11-03 | 10 Critical |
| The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated. This vulnerability was originally fixed in 0.45.2. It was reintroduced in 0.53.0 when the HTTP client was refactored into a shared core module, and the tenant subdomain validation was not carried over to the new location. The validation was restored in 0.55.1. | ||||
| CVE-2026-89124 | 1 Sap Se | 1 Sap Hana (display Product Catalog Based On Customs Declaration) | 2026-10-13 | 4.3 Medium |
| Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application. | ||||
| CVE-2026-89121 | 1 Sap Se | 1 Sap S/4hana (linear Asset Management Rap Business Object) | 2026-10-13 | 4.7 Medium |
| SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not authorized for. This results in a high impact on integrity. There is no impact on confidentiality and availability. | ||||
| CVE-2026-89116 | 1 Sap Se | 1 Sap Yeoman-ui | 2026-10-13 | 5.9 Medium |
| The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration value. Because the value was passed directly to the shell without sanitisation, a malicious workspace repository could craft a settings.json that injects OS commands when a developer opens the project and triggers a generator installation. | ||||
| CVE-2026-89113 | 1 Sap Se | 1 Sap Commerce Cloud (ootb Code) | 2026-10-13 | 8.8 High |
| SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Successful exploitation could allow the user to read, modify or delete sensitive data from the application's database, resulting in a high impact on confidentiality, integrity and availability of the application. | ||||
| CVE-2026-89110 | 1 Sap Se | 1 Sap Netweaver Visual Composer | 2026-10-13 | 9.9 Critical |
| SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability. | ||||
| CVE-2026-89108 | 1 Sap Se | 1 Sap Manufacturing Integration And Intelligence (configuration Service) | 2026-10-13 | 9.1 Critical |
| SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application server. Successful exploitation could allow the attacker to gain administrative control over the underlying system, extending the impact beyond the vulnerable application. This results in a high impact on confidentiality, integrity and availability. | ||||
| CVE-2026-89107 | 1 Sap Se | 1 Sap S/4hana (manage Substitution/validation Rules) | 2026-10-13 | 9.9 Critical |
| SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpreted as executable ABAP code by the rule processing logic. Successful exploitation could allow the attacker to execute ABAP arbitrary code into the system, resulting in full compromise of the affected system and high impact on confidentiality, integrity, and availability of the system. | ||||
| CVE-2026-89106 | 1 Sap Se | 1 Sapui5 | 2026-10-13 | 4.4 Medium |
| SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability. | ||||
| CVE-2026-76976 | 1 Sap Se | 1 Sap Netweaver Application Server Abap (applications Based On Sap Gui For Html) | 2026-10-13 | 5.4 Medium |
| Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If the victim interacts with the affected content, malicious scripts could be executed in the victim's browser context. This vulnerability has a low impact on the confidentiality and integrity of the data and no impact on the availability of the application. | ||||
| CVE-2026-76975 | 1 Sap Se | 1 Sapui5 (support Assistant Overlay) | 2026-10-13 | 6.1 Medium |
| Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper sanitization, causing attacker-supplied script to execute in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope, impacting confidentiality and integrity, while availability remains unaffected. | ||||
| CVE-2026-58249 | 1 Sap Se | 1 Sap Netweaver And Sap Web Dispatcher (internet Communication Manager) | 2026-10-13 | 7.5 High |
| SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful exploitation can therefore result in a high impact on the availability of the affected application. There is no impact on the confidentiality or integrity of the application. | ||||
| CVE-2026-44756 | 1 Sap Se | 1 Sap Extended Passport (epp) Processing | 2026-09-22 | 10 Critical |
| A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application. | ||||
| CVE-2026-76961 | 1 Sap Se | 1 Sap S/4hana (finance For Advanced Payment Management) | 2026-09-09 | 3.5 Low |
| SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be triggered on the web server on their behalf. This results in a low impact on confidentiality and integrity. There is no impact on availability. | ||||
| CVE-2026-44766 | 1 Sap Se | 1 Sap S/4hana (intercompany Matching And Reconciliation) | 2026-09-08 | 6.5 Medium |
| SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact on confidentiality, with no impact on integrity and availability of the application. | ||||