Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Vulnerabilities fixed in SAP products

🗓️ 19 Sep 2024 11:37:39Reported by NCSCType 
ncsc
 ncsc🔗 advisories.ncsc.nl👁 6 Views

SAP fixed vulnerabilities in SAP products to block cross site scripting, authentication bypass, and data access.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Jazz Team Server affect IBM Rational products based on IBM Jazz technology
28 Apr 202118:35
–ibm
GithubExploit		sslpwn
21 Jun 202617:45
–githubexploit
BDU FSTEC		The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to upload arbitrary files.
15 Jun 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the eProcurement component of the SAP S/4HANA Finance software allows a attacker to execute XSS attacks.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the functional module of the RFC interface in SAP NetWeaver Application Server ABAP and ABAP Platform allows attackers to compromise the confidentiality of protected information.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the SAP Business Warehouse data management and analytics system, related to deficiencies in authentication procedures, allows attackers to disclose protected information.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of the SAP Business Warehouse data management and analytics system, related to deficiencies in authentication procedures, allows attackers to disclose protected information.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform software integration platforms, related to incorrect authorization, allows attackers to execute arbitrary code.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform software integration platforms, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality of protected information.
15 Oct 202500:00
–bdu_fstec
BDU FSTEC		The vulnerability of SAP NetWeaver AS Java software integration platforms, related to the unencrypted storage of critical information, allows attackers to disclose protected data.
15 Oct 202500:00
–bdu_fstec
Rows per page
Vulners
Node
sapbusiness_warehouseMatch200
OR
sapbusiness_warehouseMatch300
OR
sapbusiness_warehouseMatch400
OR
sapbusiness_warehouseMatch700
OR
sapbusiness_warehouseMatch701
OR
sapbusiness_warehouseMatch702
OR
sapbusiness_warehouseMatch731
OR
sapbusiness_warehouseMatch740
OR
sapbusiness_warehouseMatch750
OR
sapbusiness_warehouseMatch751
OR
sapbusiness_warehouseMatch752
OR
sapbusiness_warehouseMatch753
OR
sapbusiness_warehouseMatch754
OR
sapbusiness_warehouseMatch755
OR
sapbusiness_warehouseMatch756
OR
sapbusiness_warehouseMatch757
OR
sapbusiness_warehouseMatch758
OR
sapbusinessobjects_business_intelligence_platformMatch430
OR
sapcommerce_cloudMatch2211
OR
sapnetweaver_application_server_abapMatch700
OR
sapnetweaver_application_server_abapMatch701
OR
sapnetweaver_application_server_abapMatch702
OR
sapnetweaver_application_server_abapMatch731
OR
sapnetweaver_application_server_abapMatch740
OR
sapnetweaver_application_server_abapMatch750
OR
sapnetweaver_application_server_abapMatch751
OR
sapnetweaver_application_server_abapMatch752
OR
sapnetweaver_application_server_abapMatch753
OR
sapnetweaver_application_server_abapMatch754
OR
sapnetweaver_application_server_abapMatch755
OR
sapnetweaver_application_server_abapMatch756
OR
sapnetweaver_application_server_abapMatch757
OR
sapnetweaver_application_server_abapMatch758
OR
sapnetweaver_application_server_abapMatch912
OR
sapnetweaver_as_java_for_deploy_serviceMatch7.50
OR
sapnetweaver_as_java_for_deploy_serviceMatch7.50
OR
sapnetweaver_enterprise_portalMatch7.50
OR
sapoil_%/_gasMatch600
OR
sapoil_%/_gasMatch602
OR
sapoil_%/_gasMatch603
OR
sapoil_%/_gasMatch604
OR
sapoil_%/_gasMatch605
OR
sapoil_%/_gasMatch606
OR
sapoil_%/_gasMatch617
OR
sapoil_%/_gasMatch618
OR
sapoil_%/_gasMatch800
OR
sapoil_%/_gasMatch802
OR
sapoil_%/_gasMatch803
OR
sapoil_%/_gasMatch804
OR
sapoil_%/_gasMatch805
OR
sapoil_%/_gasMatch806
OR
sapoil_%/_gasMatch807
OR
sapoil_%/_gasMatch600
OR
sapoil_%/_gasMatch602
OR
sapoil_%/_gasMatch603
OR
sapoil_%/_gasMatch604
OR
sapoil_%/_gasMatch605
OR
sapoil_%/_gasMatch606
OR
sapoil_%/_gasMatch617
OR
sapoil_%/_gasMatch618
OR
sapoil_%/_gasMatch800
OR
sapoil_%/_gasMatch802
OR
sapoil_%/_gasMatch803
OR
sapoil_%/_gasMatch804
OR
sapoil_%/_gasMatch805
OR
sapoil_%/_gasMatch806
OR
sapoil_%/_gasMatch807
OR
sapstudent_life_cycle_managementMatch617
OR
sapstudent_life_cycle_managementMatch618
OR
sapstudent_life_cycle_managementMatch800
OR
sapstudent_life_cycle_managementMatch802
OR
sapstudent_life_cycle_managementMatch803
OR
sapstudent_life_cycle_managementMatch804
OR
sapstudent_life_cycle_managementMatch805
OR
sapstudent_life_cycle_managementMatch806
OR
sapstudent_life_cycle_managementMatch807
OR
sapstudent_life_cycle_managementMatch808

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
19 Sep 2024 11:37Current
7.1High risk
Vulners AI Score7.1
CVSS 24.3
CVSS 3.15.9 - 6.5
EPSS0.06049
SSVC
cross site scriptingauthentication bypassdata accesssap productsnetweaverhana
6