Sap

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-6869 1Sap 1Netweaver Apr 29, 2026 Nov 23, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2013-6823 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 6.4 MEDIUM· v2 GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2013-6822 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity (XXE) issue.
CVE-2013-6821 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-6820 1Sap 1Netweaver Development Infrastructure Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors.
CVE-2013-6819 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6818 1Sap 1Netweaver Logviewer Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 6.4 MEDIUM· v2 SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2013-6817 1Sap 1Network Interface Router Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages.
CVE-2013-6816 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6815 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity...Show more The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue.Show less
CVE-2013-6814 1Sap 1Netweaver Apr 29, 2026 Nov 20, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecif...Show more The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecified vectors.Show less
CVE-2013-6284 1Sap 1Erp Central Component Apr 29, 2026 Oct 26, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors...Show more Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."Show less
CVE-2013-6244 1Sap 1Netweaver Apr 29, 2026 Oct 24, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an e...Show more The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2013-3244 1Sap 1Erp Central Component Apr 29, 2026 Oct 24, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2...Show more Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request.Show less
CVE-2013-5751 1Sap 1Netweaver Apr 29, 2026 Sep 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-5723 1Sap 1Netweaver Apr 29, 2026 Sep 12, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0_DELETE_DERIVATION_TABLE."
CVE-2013-3319 1Sap 1Netweaver Apr 29, 2026 Aug 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.
CVE-2013-3063 1Sap 1Basis Communication Services Apr 29, 2026 May 1, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors.
CVE-2013-3062 1Sap 1Production Planning And Control Apr 29, 2026 May 1, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions via unspecified vecto...Show more The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.Show less
CVE-2013-3061 1Sap 2Erp Central Component Healthcare Industry Solution Apr 29, 2026 May 1, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users...Show more The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.Show less

Previous 1...737475...80 Next