CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

9.9CVSS6.2AI score0.00501EPSS

SAP Business Planning and Consolidation和SAP Business Warehouse SQL注入漏洞

SAP Business Planning and Consolidation, as well as SAP Business Warehouse, are products of the German company SAP. SAP Business Planning and Consolidation is a business planning and integration software. This software provides features for budget preparation, forecasting, and financial...

CNNVD•added 2026/04/14 12:0 a.m.•9 views

SAP Material Master 安全漏洞

SAP Material Master is a corporate materials data management and maintenance system developed by the German company SAP. There is a security vulnerability in SAP Material Master; this vulnerability arises from the lack of mandatory authorization checks during report execution, which may lead to t...

4.3CVSS5.8AI score0.00168EPSS

Positive Technologies•added 2026/04/14 12:0 a.m.•10 views

PT-2026-32555

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00168EPSS

Positive Technologies•added 2026/04/14 12:0 a.m.•13 views

PT-2026-32559

Due to missing authorization checks in the SAP S/4HANA frontend OData Service Manage Reference Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and...

6.5CVSS5.8AI score0.00181EPSS

6.5CVSS5.8AI score0.00181EPSS

SAP S/4HANA OData Service 安全漏洞

The SAP S/4HANA OData Service is an enterprise system data interface and service integration component provided by SAP, a German company. There is a security vulnerability in the SAP S/4HANA OData Service Manage Reference Equipment, which stems from the lack of authorization checks. This...

6.1CVSS5.7AI score0.00226EPSS

SAP Supplier Relationship Management（SRM）跨站脚本漏洞

SAP Supplier Relationship Management SRM is a supplier relationship management solution developed by the German company SAP. This product automates procurement and purchasing processes both within the enterprise and between suppliers. It also provides features such as invoice generation. However,...

6.1CVSS6AI score0.00192EPSS

SAP NetWeaver Application Server Java 代码注入漏洞

SAP NetWeaver Application Server Java is an application server provided by the German company SAP, which offers a Java runtime environment. This product is primarily used for developing and running Java EE applications. SAP NetWeaver Application Server Java has a code injection vulnerability; thi...

Positive Technologies•added 2026/04/14 12:0 a.m.•12 views

PT-2026-32553

Due to a missing authorization check, SAP S/4HANA Private Cloud and On-Premise allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the...

4.9CVSS5.8AI score0.00158EPSS

RedHat Linux•added 2026/04/13 5:44 p.m.•7 views

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.6CVSS5.8AI score0.00728EPSS

RedHat Linux•added 2026/04/13 9:59 a.m.•8 views

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.6CVSS7.1AI score0.00728EPSS