Business Warehouse (Sap) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2024-07-09. Vendor: Sap.

CVEs of Business Warehouse

• CVE-2024-39594 - CVSS 6.1 (medium), 2024-07-09: SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site…
• CVE-2024-39595 - CVSS 5.4 (medium), 2024-07-09: SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site…
• CVE-2023-33992 - CVSS 6.5 (medium), 2023-07-11: The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE…
• CVE-2021-21468 - CVSS 6.5 (medium), 2021-01-12: The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the…
• CVE-2021-21466 - CVSS 9.9 (critical), 2021-01-12: SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject…
• CVE-2021-21465 - CVSS 9.9 (critical), 2021-01-12: The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can…
• CVE-2020-26838 - CVSS 9.1 (critical), 2020-12-09: SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker…