Sap Gui For Windows (Sap Se) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-11-11. Vendor: Sap Se.
CVEs of Sap Gui For Windows
- CVE-2025-42888 - CVSS 5.5 (medium), 2025-11-11: SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during…
- CVE-2025-42943 - CVSS 4.5 (medium), 2025-08-12: SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker…
- CVE-2025-42979 - CVSS 5.6 (medium), 2025-07-08: The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the…
- CVE-2025-43005 - CVSS 4.3 (medium), 2025-05-13: SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials.…
- CVE-2025-24870 - CVSS 6 (medium), 2025-02-11: SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information…
- CVE-2025-0055 - CVSS 6 (medium), 2025-01-14: SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or…
- CVE-2024-39600 - CVSS 5 (medium), 2024-07-09: Under certain conditions, the memory of SAP GUI for Windows contains the password used to log on to an SAP system, which might allow an attacker to get hold…
- CVE-2023-32113 - CVSS 9.3 (critical), 2023-05-09: SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a…
- CVE-2022-41205 - CVSS 6.1 (medium), 2022-11-08: SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attacker can gain access to registries which…
- CVE-2021-40503 - CVSS 7.8 (high), 2021-11-10: An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on…
- CVE-2021-27612 - CVSS 6.1 (medium), 2021-05-11: In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware…
- CVE-2021-21448 - CVSS 6.5 (medium), 2021-01-12: SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under…
