Vulnerabilities in SAP SE
778 resultsCVE-2020-6335MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cEPSS 1.6%CVE-2020-6350MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6322MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6360MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6314MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cEPSS 1.6%CVE-2020-6329MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6349MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6342MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6327MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6361MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in cEPSS 1.6%CVE-2020-6347MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crEPSS 1.6%CVE-2020-6334MEDIUMSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crEPSS 1.6%CVE-2021-27635CRITICALSAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a nEPSS 1.6%CVE-2018-2401MEDIUMSAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting EPSS 1.6%CVE-2018-2362—A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclosEPSS 1.6%CVE-2020-6191HIGHSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAPEPSS 1.6%CVE-2019-0248—Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attackerEPSS 1.6%CVE-2019-0355—SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before vEPSS 1.6%CVE-2018-2408HIGHImproper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of paEPSS 1.5%CVE-2020-6294HIGHXvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checkEPSS 1.5%