BW
Product
Business Warehouse
7
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 4Low 0
Watch
Add Business Warehouse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21465 | 9.9 | Jan 12 | The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database Affected: 710; 711; 730; 731; 740; 750; +6 more |
| CVE-2020-26838 | 9.1 | Dec 9 | SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high)… Affected: 700; 701; 702; 731; 740; 750; +6 more |
| CVE-2021-21466 | 8.8 | Jan 12 | SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote… Affected: 700; 701; 702; 711; 730; 731; +3 more |
| CVE-2023-33992 | 6.5 | Jul 11 | The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200,… Affected: 730; 731; 740; 750 |
| CVE-2021-21468 | 6.5 | Jan 12 | The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read… Affected: 710; 711; 730; 731; 740; 750; +6 more |
| CVE-2024-39594 | 6.1 | Jul 9 | SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS)… Affected: 700; 701; 702; 730; 731; 740; +9 more |
| CVE-2024-39595 | 5.4 | Jul 9 | SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS)… Affected: 700; 701; 702; 730; 731; 740; +9 more |
Showing 7