SAP vulnerabilities

CVEs per yearBy the year they were published

1. 201712
2. 201866
3. 20212
4. 202213
5. 202366

Newest CVEs

• CVE-2023-29189

  HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)

  SAP · CRM (WebClient UI)

  Medium5.4
• CVE-2023-29187

  DLL Hijacking vulnerability in SapSetup (Software Installation Program)

  SAP · SapSetup (Software Installation Program)

  Medium6.7
• CVE-2023-29186

  Directory/Path Traversal vulnerability in SAP NetWeaver.

  SAP · NetWeaver (BI CONT ADDON)

  High8.7
• CVE-2023-29185

  Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)

  SAP · NetWeaver AS for ABAP (Business Server Pages)

  Medium5.3
• CVE-2023-29112

  Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)

  SAP · Application Interface Framework (Message Monitoring)

  Low3.7
• CVE-2023-29111

  Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

  SAP · Application Interface Framework (ODATA service)

  Low3.1
• CVE-2023-29110

  Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)

  SAP · Application Interface Framework (Message Dashboard)

  Low3.7
• CVE-2023-29109

  Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)

  SAP · Application Interface Framework (Message Dashboard)

  Medium4.4
• CVE-2023-29108

  IP filter vulnerability in ABAP Platform and SAP Web Dispatcher

  SAP · ABAP Platform and SAP Web Dispatcher

  Medium5.0
• CVE-2023-28765

  Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )

  SAP · BusinessObjects Business Intelligence Platform (Promotion Management)

  Critical9.8