sap
Safeguard articles tagged "sap" — guides, analysis, and best practices for software supply chain and application security.
17 articles
CVE-2016-3976: SAP NetWeaver Directory Traversal Vulnerability
CVE-2016-3976 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-6207: SAP Solution Manager Missing Authentication for Critical Function Vulnerability
CVE-2020-6207 affects SAP Solution Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-6287: SAP NetWeaver Missing Authentication for Critical Function Vulnerability
CVE-2020-6287 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2016-9563: SAP NetWeaver XML External Entity (XXE) Vulnerability
CVE-2016-9563 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2010-5326: SAP NetWeaver Remote Code Execution Vulnerability
CVE-2010-5326 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2018-2380: SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
CVE-2018-2380 affects SAP Customer Relationship Management (CRM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2016-2388: SAP NetWeaver Information Disclosure Vulnerability
CVE-2016-2388 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-09.
CVE-2016-2386: SAP NetWeaver SQL Injection Vulnerability
CVE-2016-2386 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-09.
CVE-2021-38163: SAP NetWeaver Unrestricted File Upload Vulnerability
CVE-2021-38163 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-09.
CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability
CVE-2022-22536 affects SAP Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-18.
CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVE-2019-0344 affects SAP Commerce Cloud and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-30.
CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability
CVE-2017-12637 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-19.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.