Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
230 results · page 2 of 5
Aug 11, 2025SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC.CVE-2025-42957 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.9
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
- Product
- SAP S/4HANA (Private Cloud or On-Premise)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 11, 2025Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction aCVE-2025-42946 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.9
Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacker to potentially read or delete these files hence causing a high impact on confidentiality and low impact on integrity. There is no impact on availability of the system.
- Product
- SAP S/4HANA (Bank Communication Management)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 11, 2025SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection.CVE-2025-42934 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.
- Product
- SAP S/4HANA (Supplier invoice)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2025SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability.CVE-2025-42967 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.9
SAP S/4HANA and SAP SCM Characteristic Propagation has remote code execution vulnerability. This allows an attacker with user level privileges to create a new report with his own code potentially gaining full control of the affected SAP system causing high impact on confidentiality, integrity, and availability of the application.
- Product
- SAP S/4HANA and SAP SCM (Characteristic Propagation)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2025SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorizatioCVE-2025-42960 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentiality and availability of the application.
- Product
- SAP Business Warehouse and SAP BW/4HANA BEx Tools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration coCVE-2025-42993 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.7
Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC destination, leading to code execution under the privileges of the assigned high-privilege user. While the vulnerability has a low impact on Availability, it significantly poses a high risk to both Confidentiality and Integrity.
- Product
- SAP S/4HANA (Enterprise Event Enablement)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks.CVE-2025-42991 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
- Product
- SAP S/4HANA (Bank Account Application)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter.CVE-2025-42987 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.
- Product
- SAP S/4HANA (Manage Processing Rules - For Bank Statement)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.CVE-2025-42984 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.4
SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user. Due to this, an attacker could execute the function import on the entity making it inaccessible for unrestricted user. This has low impact on confidentiality and availability of the application.
- Product
- SAP S/4HANA (Manage Central Purchase Contract application)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2025SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certCVE-2025-43010 · Network & remote access · SAP_SE · reported by cna@sap.comHigh 8.3
SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high impact on integrity and availability to the application.
- Product
- SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL))
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2025Due to missing authorization check, an unauthorized user can view the files of other company.CVE-2025-43008 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.8
Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability.
- Product
- SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2025SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying tCVE-2025-43003 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.4
SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application.
- Product
- SAP S/4HANA (Private Cloud & On-Premise)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2025SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check.CVE-2025-43002 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.
- Product
- SAP S4/HANA (OData meta-data property)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 22, 2025SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to tCVE-2025-31328 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.6
SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the confidentiality and integrity of the application without affecting the availability.
- Product
- SAP S/4 HANA (Learning Solution)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2025SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC.CVE-2025-27429 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.9
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
- Product
- SAP S/4HANA (Private Cloud)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2025The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact witCVE-2025-27436 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact with a resource is legitimate, allowing the attacker to delete the attachment of a posted bank statement. This leads to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
- Product
- SAP S/4HANA (Manage Bank Statements)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2025The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reCVE-2025-27433 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.
- Product
- SAP S/4HANA (Manage Bank Statements)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2025Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted infoCVE-2025-27430 · Network & remote access · SAP_SE · reported by cna@sap.comLow 3.5
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
- Product
- SAP CRM and SAP S/4HANA (Interaction Center)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2025OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privCVE-2025-26656 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application.
- Product
- S/4HANA (Manage Purchasing Info Records)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2025An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions CVE-2025-23188 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions beyond their intended permissions. This causes a low impact on integrity with no impact on confidentiality and availability.
- Product
- SAP S/4HANA (RBD)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 10, 2025The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticaCVE-2025-24868 · Network & remote access · SAP_SE · reported by cna@sap.comHigh 7.1
The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirect URL validation. On successful exploitation attacker can cause limited impact on confidentiality, integrity, and availability of the system.
- Product
- SAP HANA extended application services, advanced model (User Account and Authentication Services)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 22, 2024WP-Orphanage Extended: Cross-Site Request ForgeryCVE-2024-11415 · WordPress plugins & themes · reported by WordfenceHigh 8.8
The WP-Orphanage Extended plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the wporphanageex_menu_settings() function. This makes it possible for unauthenticated attackers to escalate the privileges of all orphan accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
- Product
- WP-Orphanage Extended
- Affected
- up to 1.2
- What to do
- Affects up to 1.2. Update WP-Orphanage Extended to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Oct 8, 2024Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method.CVE-2024-45282 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations. Confidentiality and Availability are not impacted.
- Product
- SAP S/4 HANA (Manage Bank Statements)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary prCVE-2024-45277 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact on the availability of the application. This has no impact on Confidentiality and Integrity.
- Product
- SAP HANA Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted.CVE-2024-44121 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of the application
- Product
- SAP S/4 HANA (Statutory Reports)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2024Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to aCVE-2024-42378 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.
- Product
- SAP S/4HANA eProcurement
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privilegeCVE-2024-37172 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.4
SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity.
- Product
- SAP S/4HANA Finance (Advanced Payment Management)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 10, 2024SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting imCVE-2024-37176 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.5
SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.
- Product
- SAP BW/4HANA Transformation and Data Transfer Process
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
Jun 10, 2024Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of priviCVE-2024-34691 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.5
Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.
- Product
- SAP S/4HANA (Manage Incoming Payment Files)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
May 14, 2024Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2024-4139 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can delete rules of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
- Product
- SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
May 14, 2024Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2024-4138 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
- Product
- SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
May 14, 2024Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vuCVE-2024-33002 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability with low impact on Confidentiality and Integrity of the application.
- Product
- SAP S/4HANA (Document Service Handler for DPS)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
Apr 8, 2024Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2024-30217 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application. Confidentiality and Availability are not impacted.
- Product
- SAP S/4 HANA (Cash Management)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
Apr 8, 2024Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2024-30216 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted.
- Product
- SAP S/4 HANA (Cash Management)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordme.sap.comsupport.sap.com
Jan 12, 2024An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2.CVE-2024-23177 · Other software · Mediawiki · reported by MITREMedium 6.1
An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.
- Product
- Mediawiki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.wikimedia.orgphabricator.wikimedia.org
Jan 8, 2024SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks.CVE-2024-21736 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.4
SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.
- Product
- SAP S/4HANA Finance (Advanced Payment Management)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 30, 2023In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not imCVE-2023-36920 · Network & remote access · SAP SE · reported by cna@sap.comMedium 6.1
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-FRAME-OPTIONS response header is not implemented, allowing an unauthenticated attacker to attempt clickjacking, which could result in disclosure or modification of information.
- Product
- SAP Enable Now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Oct 9, 2023The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impacCVE-2023-42475 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.
- Product
- SAP S/4HANA Core
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 9, 2023S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privCVE-2023-42473 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.4
S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the application.
- Product
- S/4HANA (Manage Withholding Tax Items)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2023The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attCVE-2023-41369 · Network & remote access · SAP_SE · reported by cna@sap.comLow 3.5
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.
- Product
- SAP S/4HANA (Create Single Payment application)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2023The OData service of the S4 HANA (Manage checkbook apps) - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating CVE-2023-41368 · Network & remote access · SAP_SE · reported by cna@sap.comLow 2.7
The OData service of the S4 HANA (Manage checkbook apps) - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call.
- Product
- S4 HANA ABAP (Manage checkbook apps)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2023SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validatioCVE-2023-40306 · Network & remote access · SAP SE · reported by cna@sap.comMedium 6.1
SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.
- Product
- SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2023Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operCVE-2023-36922 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.1
Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, the attacker can read or modify the system data as well as shut down the system.
- Product
- SAP ECC and SAP S/4HANA (IS-OIL)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2023In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not imCVE-2023-36919 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5.3
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not implemented, allowing an unauthenticated attacker to obtain referrer details, resulting in information disclosure.
- Product
- SAP Enable Now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Jul 10, 2023In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header isCVE-2023-36918 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header is not implemented, allowing an unauthenticated attacker to trigger MIME type sniffing, which leads to Cross-Site Scripting, which could result in disclosure or modification of information.
- Product
- SAP Enable Now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Jul 10, 2023When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the saveCVE-2023-35870 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.3
When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template could be deleted, hence making the resource temporarily unavailable.
- Product
- SAP S/4HANA (Manage Journal Entry Template)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2023The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100CVE-2023-33992 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.5
The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs authorizations on the query as well as on the keyfigure/measure level. The missing check only affects the data level.
- Product
- SAP Business Warehouse and SAP BW/4HANA
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2023In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-ProtectCVE-2023-33988 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Content-Security-Policy and X-XSS-Protection response headers are not implemented, allowing an unauthenticated attacker to attempt reflected cross-site scripting, which could result in disclosure or modification of information.
- Product
- SAP Enable Now
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise SeCVE-2022-45153 · Other software · SUSE · reported by meissner@suse.deHigh 7
An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.
- Product
- SUSE Linux Enterprise Module for SAP Applications 15-SP1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.suse.combugzilla.suse.com
Feb 13, 2023SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privilCVE-2023-24524 · Network & remote access · SAP · reported by cna@sap.comMedium 6.5
SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.
- Product
- S/4 HANA (Map Treasury Correspondence Format Data)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comsap.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.