Vulnerabilities > SAP

DATE CVE VULNERABILITY TITLE RISK
2022-02-09 CVE-2022-22544 Unspecified vulnerability in SAP Solution Manager 7.20
Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems.
network
low complexity
sap
critical
9.1
2022-02-09 CVE-2022-22545 Unspecified vulnerability in SAP Netweaver Abap
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.
network
low complexity
sap
4.9
2022-02-09 CVE-2022-22546 Unspecified vulnerability in SAP Businessobjects web Intelligence 420
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.
network
low complexity
sap
5.4
2022-01-14 CVE-2021-42067 Unspecified vulnerability in SAP Netweaver Abap and Netweaver Application Server Abap
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see.
network
low complexity
sap
4.3
2022-01-14 CVE-2021-44234 Unspecified vulnerability in SAP Business ONE 10.0
SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
local
low complexity
sap
5.5
2022-01-14 CVE-2022-22529 Cross-site Scripting vulnerability in SAP Enterprise Threat Detection 2.0
SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability.
network
low complexity
sap CWE-79
6.1
2022-01-14 CVE-2022-22530 Unspecified vulnerability in SAP S/4Hana
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files.
network
low complexity
sap
8.1
2022-01-14 CVE-2022-22531 Unspecified vulnerability in SAP S/4Hana
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files.
network
low complexity
sap
8.1
2021-12-14 CVE-2021-42061 Unspecified vulnerability in SAP Businessobjects Business Intelligence Platform 420
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
network
low complexity
sap
5.4
2021-12-14 CVE-2021-42063 Cross-site Scripting vulnerability in SAP Knowledge Warehouse
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50.
network
low complexity
sap CWE-79
6.1