PT-2025-20815 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4 HANA affected versions not specified Description: The issue allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field, potentially...

SAP Data Services Management Console 跨站脚本漏洞

SAP Data Services Management Console is a console for managing and monitoring data services. A cross-site scripting vulnerability exists in SAP Data Services Management Console that stems from the system failing to adequately encode user-controlled input. An attacker could exploit the vulnerabili...

SAP Business Objects Business Intelligence Platform 安全漏洞

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An access control error vulnerability exists in SAP Business Objects...

PT-2025-20806

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The issue concerns the use of a deprecated java applet component within the Live Auction Cockpit in SAP SRM. This allows an unauthenticated attacker to craft ...

PT-2025-20814 · Sap · Sap S4Core

Name of the Vulnerable Software and Affected Versions: SAP S4CORE affected versions not specified Description: The issue allows an authenticated attacker to access restricted information due to a missing authorization check in the OData meta-data property. This could cause a low impact on...

PT-2025-20805

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated Java applet component, allowing an unauthenticated attacker to execute...

PT-2025-20808

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM versions prior to July 2025 patch SAP SRM Live Auction Cockpit version 7.14 Description The Live Auction Cockpit in SAP Supplier Relationship Management SRM utilizes a deprecated Java applet component...

CVE-2025-30011: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The Live Auction Cockpit in SAP Supplier Relationship Management SRM uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected...

PT-2025-20812

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...

PT-2025-20807

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The issue concerns the use of a deprecated java applet component within the Live Auction Cockpit in SAP SRM. This allows an unauthenticated attacker to send a...

CVE-2025-43006: Improper Neutralization of Input During Web Page Generation

SAP Supplier Relationship Management Master Data Management Catalogue allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting XSS vulnerability. This has no impact on the availability of the application, but it can have som...

SAP NetWeaver Visual Composer Metadata Uploader 安全漏洞

SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...

SAP NetWeaver 安全漏洞

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. An information disclosure vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to...

PT-2025-20809

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The issue allows an unauthenticated attacker to submit a crafted XML file, enabling access to sensitive files and data. This has a high impact on the...

SAP Supplier Relationship Management 代码问题漏洞

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP, Germany. The product automates purchasing and acquisition processes within an organization as well as between suppliers, and provides functions such as invoicing. A code issue vulnerability exists in...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Recent assessments: Assessed Attacker...

PT-2025-20822 · Sap · Sap S/4Hana Cloud Private Edition +1

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Cloud Private Edition affected versions not specified Description: The issue allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs,...

SAP Digital Manufacturing 安全漏洞

SAP Digital Manufacturing is a manufacturing operations management MOM platform from SAP, Germany, that supports agile operations and supports a sustainable workforce. A security vulnerability exists in SAP Digital Manufacturing that stems from a security misconfiguration that could lead to...

PT-2025-20804 · Sap Se · Sap Data Services Management Console

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns insufficient encoding of user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on a compromised...

PT-2025-20811 · Sap · Sap Gateway Client

Name of the Vulnerable Software and Affected Versions: SAP Gateway Client affected versions not specified Description: The issue allows a high-privileged user to access restricted information beyond the application's scope, potentially leading to low impact on confidentiality, integrity, and...