SAP Sapgui vulnerabilities

6 CVEs affecting SAP Sapgui, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4475, published 2009-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0621, published 2008-02-06. High severity, CVSS 7.5. EPSS: 73.4% chance of exploitation in the next 30 days. Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03,…
CVE-2007-4475, published 2009-04-01. High severity, CVSS 9.3. EPSS: 40.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to…
CVE-2008-4387, published 2008-11-10. High severity, CVSS 9.3. EPSS: 15.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet…
CVE-2008-0620, published 2008-02-06. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
CVE-2002-1579, published 2004-04-15. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
CVE-2003-1035, published 2004-04-15. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does…