SAP Basis vulnerabilities
6 CVEs affecting SAP Basis, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29110, published 2023-04-11.
More from SAP.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2018-2478, published 2018-11-13. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all…
- CVE-2019-0248, published 2019-01-08. Medium severity, CVSS 5.9. EPSS: 1.6% chance of exploitation in the next 30 days. Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.
- CVE-2022-41264, published 2022-12-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to…
- CVE-2020-6307, published 2020-01-14. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of…
- CVE-2023-29110, published 2023-04-11. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized…
- CVE-2023-29109, published 2023-04-11. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An…