SAP

Products

ProductCVEsExploitedLatest
NetWeaver AS for ABAP and ABAP Platform7–Apr 11, 2023
NetWeaver Application Server for ABAP and ABAP Platform3–Mar 14, 2023
BusinessObjects Business Intelligence Platform (Web Services)3–Mar 14, 2023
NetWeaver AS ABAP (BSP Framework)3–Feb 14, 2023
NetWeaver AS for Java3–Mar 14, 2023
NetWeaver Process Integration2–Dec 13, 2022
Business Planning and Consolidation2–Feb 14, 2023
CRM (WebClient UI)2–Apr 11, 2023
Application Interface Framework (Message Dashboard)2–Apr 11, 2023
Solution Manager2–Feb 14, 2023
Solution Manager (BSP Application)2–Feb 14, 2023
BusinessObjects Business Intelligence platform (Analysis edition for OLAP)1–Jan 10, 2023
BusinessObjects Business Intelligence Platform (Central management console)1–Jan 10, 2023
BusinessObjects Business Intelligence Platform (CMC)1–Feb 14, 2023
BusinessObjects Business Intelligence Platform (Promotion Management)1–Apr 11, 2023
cloud-sdk-js1–Nov 5, 2021
Commerce Webservices 2.0 (Swagger UI)1–Dec 13, 2022
Content Server1–Mar 14, 2023
CRM1–Apr 11, 2023
Diagnostics Agent (EventLogServiceCollector)1–Apr 11, 2023
Diagnostics Agent (OSCommand Bridge)1–Apr 11, 2023
Disclosure Management1–Dec 13, 2022
Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests)1–Feb 14, 2023
HCM Fiori App My Forms (Fiori 2.0)1–Apr 11, 2023
Host Agent (SAPOSCOL)1–Mar 14, 2023
Host Agent Service1–Feb 14, 2023
Host Agent (Windows)1–Jan 10, 2023
Landscape Management1–Apr 11, 2023
less-openui51–Feb 16, 2021
NetWeaver ABAP Server and ABAP Platform1–Jan 10, 2023
NetWeaver AS ABAP and ABAP Platform1–Feb 14, 2023
NetWeaver AS ABAP (Business Server Pages application)1–Feb 14, 2023
NetWeaver AS for ABAP and ABAP Platform (SAPRSBRO Program)1–Mar 14, 2023
NetWeaver AS for ABAP (Business Server Pages)1–Apr 11, 2023
NetWeaver AS for Java (Http Provider Service)1–Dec 12, 2022
NetWeaver AS Java for Classload Service1–Mar 14, 2023
NetWeaver AS Java for Deploy Service1–Apr 11, 2023
NetWeaver AS Java (Object Analyzing Service)1–Mar 14, 2023
NetWeaver (BI CONT ADDON)1–Apr 11, 2023
NetWeaver Enterprise Portal1–Apr 11, 2023
NetWeaver (SAP Enterprise Portal)1–Mar 14, 2023
S/4 HANA (Map Treasury Correspondence Format Data)1–Feb 14, 2023
SAP BPC MS 10.01–Jan 10, 2023
SAP Business Objects Platform (Monitoring DB) 1–Dec 12, 2022
SAP BusinessObjects Business Intelligence Platform1–Jan 10, 2023
SapSetup (Software Installation Program)1–Apr 11, 2023
Solution Manager and ABAP managed systems1–Mar 14, 2023
Solution Manager (Diagnostic Agent)1–Dec 12, 2022
Solution Manager (Enterprise Search)1–Dec 13, 2022
ABAP Platform1–Mar 14, 2023
Sourcing and SAP Contract Lifecycle Management1–Dec 13, 2022
ABAP Platform and SAP Web Dispatcher1–Apr 11, 2023
Application Interface Framework (Message Monitoring)1–Apr 11, 2023
Application Interface Framework (ODATA service)1–Apr 11, 2023
Authenticator for Android1–Mar 14, 2023
Bank Account Management (Manage Banks)1–Jan 10, 2023
BASIS1–Dec 13, 2022
Business Objects (Adaptive Job Server)1–Mar 14, 2023
Business Objects Business Intelligence Platform (CMC)1–Mar 14, 2023
Business Objects Business Intelligence Platform (Web intelligence)1–Dec 12, 2022
BusinessObjects Business Intelligence Platform1–Dec 13, 2022

Exploited and recent CVEs

  • CVE-2023-29189 Medium 5.4 HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI) 0.4%
  • CVE-2023-29187 Medium 6.7 DLL Hijacking vulnerability in SapSetup (Software Installation Program) 0.2%
  • CVE-2023-29186 High 8.7 Directory/Path Traversal vulnerability in SAP NetWeaver. 23.0%
  • CVE-2023-29185 Medium 5.3 Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages) 0.6%
  • CVE-2023-29112 Low 3.7 Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring) 0.3%
  • CVE-2023-29111 Low 3.1 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service) 0.4%
  • CVE-2023-29110 Low 3.7 Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) 0.3%
  • CVE-2023-29109 Medium 4.4 Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) 0.3%
  • CVE-2023-29108 Medium 5.0 IP filter vulnerability in ABAP Platform and SAP Web Dispatcher 0.4%
  • CVE-2023-28765 Critical 9.8 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management ) 14.9%
  • CVE-2023-28763 Medium 6.5 Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform 0.6%
  • CVE-2023-28761 Medium 6.5 Missing Authentication check in SAP NetWeaver Enterprise Portal 0.4%
  • CVE-2023-27897 Medium 6.0 Code Injection vulnerability in SAP CRM 0.7%
  • CVE-2023-27497 Critical 10.0 Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector) 0.8%
  • CVE-2023-27267 Critical 9.0 Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge) 14.2%
  • CVE-2023-26458 Medium 6.8 Information Disclosure vulnerability in SAP Landscape Management 0.6%
  • CVE-2023-24527 Medium 5.3 Improper Access Control in SAP NetWeaver AS Java for Deploy Service 0.5%
  • CVE-2023-1903 Medium 4.3 Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0) 0.4%
  • CVE-2023-27895 Medium 6.1 Information Disclosure vulnerability in SAP Authenticator for Android 0.4%
  • CVE-2023-27893 High 8.8 Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI) 1.2%
  • CVE-2023-27501 High 8.7 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 1.0%
  • CVE-2023-27500 Critical 9.6 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 1.0%
  • CVE-2023-27498 High 7.2 Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL) 0.5%
  • CVE-2023-27894 Medium 5.0 Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform 0.6%
  • CVE-2023-27896 Medium 6.5 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform 0.5%
  • CVE-2023-27271 Medium 6.5 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform 0.6%
  • CVE-2023-27270 Medium 6.5 Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform 0.6%
  • CVE-2023-27269 Critical 9.6 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 1.0%
  • CVE-2023-27268 Medium 5.3 Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service) 0.4%
  • CVE-2023-26461 Medium 6.8 XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal) 0.5%