Sapgui

sapgui

Vendor: Sap • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4475 1Sap 1Sapgui Apr 23, 2026 Apr 1, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFi...Show more Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.Show less
CVE-2008-4387 2Sap Simba Technologies 2Mdrmsap Activex Control Sapgui Apr 23, 2026 Nov 10, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
CVE-2008-0621 1Sap 3Sapgui SaplpdSapsprint Apr 23, 2026 Feb 6, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x...Show more Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.Show less
CVE-2008-0620 1Sap 3Sapgui SaplpdSapsprint Apr 23, 2026 Feb 6, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
CVE-2003-1035 1Sap 2Sap R 3 Sapgui Apr 16, 2026 Apr 15, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the accoun...Show more The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.Show less
CVE-2002-1579 1Sap 1Sapgui Apr 16, 2026 Apr 15, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.