Basis (Sap) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2025-11-20. Vendor: Sap.

CVEs of Basis

• CVE-2025-34320 - CVSS 9.3 (critical), 2025-11-20: BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows…
• CVE-2023-29110 - CVSS 5.4 (medium), 2023-04-11: The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows…
• CVE-2023-29109 - CVSS 4.6 (medium), 2023-04-11: The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application…
• CVE-2022-41264 - CVSS 8.8 (high), 2022-12-13: Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an…
• CVE-2020-6307 - CVSS 4.3 (medium), 2020-01-14: Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization…
• CVE-2019-0248 - CVSS 5.9 (medium), 2019-01-08: Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access…
• CVE-2018-2478 - CVSS 7.2 (high), 2018-11-13: An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11,…