SAP SE vulnerabilities

Newest addition to KEV first.

• CVE-2019-0344

  Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute…

  SAP SE · SAP Commerce Cloud (virtualjdbc extension)

  ExploitedCritical9.8
• CVE-2022-22536

  SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for…

  SAP SE · SAP NetWeaver and ABAP Platform

  ExploitedCritical9.8
• CVE-2021-38163

  SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can…

  SAP SE · SAP NetWeaver (Visual Composer 7.0 RT)

  ExploitedCritical9.9
• CVE-2020-6287

  SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without…

  SAP SE · SAP NetWeaver AS JAVA (LM Configuration Wizard)

  ExploitedCritical10.0
• CVE-2020-6207

  SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service…

  SAP SE · SAP Solution Manager (User Experience Monitoring)

  ExploitedCritical10.0
• CVE-2018-2380

  SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters…

  SAP SE · SAP CRM

  ExploitedMedium6.6