CVE-2008-4387: SAP Sapgui

High severity, CVSS 9.3. EPSS: 15.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

Affected products

• SAP Sapgui: any version
• Simba Technologies Mdrmsap Activex Control: any version

Published 2008-11-10. Last modified 2026-06-16.