SAP TREX Information Disclosure Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An information disclosure vulnerability exists in version 7.10 of SAP TREX, which could be exploited by attackers to obtain sensitive information or launch further attacks...

SAP SAPCAR Local Privilege Vulnerability

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A security vulnerability exists in SAP SAPCAR that allows a local attacker to exploit the vulnerability to elevate privileges...

The vulnerability of the SAP NetWeaver software integration platform allows attackers to obtain confidential information, enhance their privileges, or carry out other malicious actions.

The vulnerability of the XML Data Archiving Service component of the SAP NetWeaver software integration platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to obtain confidential information, enhance their privileges, or cause other adverse...

SAP NetWeaver Java AS Cross-Site Scripting Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A cross-site scripting vulnerability exists in the SAP NetWeaver Java AS version 7.4 Configuration Wizard, which can be exploited by remote attackers to inject...

SAP ABAP & Java Server Denial of Service Vulnerability

SAP ABAP & Java Server is a German SAP SAP company running in NetWeaver for SAP applications to provide a development and runtime environment for the application platform and based on the ABAP high-level programming language and Java programming language application server. A security vulnerabili...

SAP Afaria XcListener Buffer Overflow Vulnerability

SAP Afaria is a mobile device management solution. A buffer overflow vulnerability exists in SAP Afaria XcListener, which allows remote attackers to submit a special request for a denial of service attack...

CVE-1999-0623

...

CVE-2022-36298

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-23405

CVE-2024-23405 entry is rejected/not used per the initial description; it does not represent an active vulnerability entry.

CVE-2021-23096

...

CVE-2022-33144

...

CVE-2022-25889

...

CVE-2025-27768

...

CVE-2022-45864

...

CVE-2024-12095

...

CVE-2011-3471

...

VB_Below3CSSUPreReq_05052022

VBBelow3CSSU...