Skip to content
Sap vulnerabilities
Products
Show 160 moreShow less
Newest
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66778
5.3 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66777
5.9 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66776
5.9 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66775
4.3 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66774
3.7 Low
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66761
4.3 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66760
6.4 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58239
3.7 Low
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58238
5.9 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58237
5.9 Medium
-
sap approuter, sap se business ai platform (approuter) +1 more
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58230
Fix available
7.0 High
-
metaguru hcm
MetaGuru｜HCM - SQL Injection
CVE-2026-15804
8.7 High
-
sap approuter
Open Redirect vulnerability in SAP Approuter
CVE-2026-44745
Fix available
8.1 High
-
sap approuter
HTTP Request Smuggling in SAP Approuter
CVE-2026-27690
Fix available
9.1 Critical
-
sap netweaver application server abap
CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-27680
3.1 Low
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2026-40135
6.5 Medium
-
sap netweaver application server abap, sap se netweaver application server abap (applications based on business server pages) +1 more
Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)
CVE-2026-27682
4.7 Medium
-
sap human capital management, sap se human capital management for sap s/4hana +1 more
Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA
CVE-2026-34264
6.5 Medium
-
sap hana cockpit, hana database explorer, sap se hana cockpit and hana database explorer +2 more
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
CVE-2026-34262
5.0 Medium
-
sap netweaver application server abap
Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-34257
6.1 Medium
-
sap manage reference structures, sap se s/4hana frontend odata service (manage reference structures) +1 more
Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)
CVE-2026-27679
6.5 Medium
-
sap netweaver application server java, sap se netweaver application server java (web dynpro java) +1 more
Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)
CVE-2026-27674
6.1 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-27688
5.0 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
CVE-2026-24316
6.4 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24310
3.5 Low
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24309
6.4 Medium
-
sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 more
Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
CVE-2026-24314
4.3 Medium
-
sap business server pages, sap se business server pages application (taf applauncher) +1 more
Open Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)
CVE-2026-24328
6.1 Medium
-
sap strategic enterprise management, sap se strategic enterprise management (balanced scorecard in bsp application) +1 more
Missing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application)
CVE-2026-24327
4.3 Medium
-
sap se s/4hana defense & security (disconnected operations), sap s\/4hana defense \& security +1 more
Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)
CVE-2026-24326
4.3 Medium
-
sap businessobjects enterprise, sap se businessobjects enterprise (central management console) +1 more
Cross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console)
CVE-2026-24325
4.8 Medium
-
sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (admintools) +1 more
Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)
CVE-2026-24324
6.5 Medium
-
sap document management system, erp, s4core +2 more
Multiple vulnerabilities in BSP Applications of SAP Document Management System
CVE-2026-24323
6.1 Medium
-
sap solution tools plug-in, sap se solution tools plug-in (st-pi) +1 more
Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
CVE-2026-24322
7.7 High
-
sap commerce cloud
Information Disclosure vulnerability in SAP Commerce Cloud
CVE-2026-24321
5.3 Medium
-
sap se netweaver and abap platform (application server abap), sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 more
Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)
CVE-2026-24320
3.1 Low
-
sap business one, sap se business one (b1 client memory dump files) +1 more
Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
CVE-2026-24319
5.8 Medium
-
sap se business workflow, sap basis +1 more
Missing authorization check in SAP Business Workflow
CVE-2026-24312
5.2 Medium
-
sap supply chain management, advanced planning and optimization +1 more
Denial of service (DOS) in SAP Supply Chain Management
CVE-2026-23689
7.7 High
-
sap se fiori app (manage service entry sheets - lean services), sap s4core +1 more
Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)
CVE-2026-23688
4.3 Medium
-
sap se netweaver as abap and abap platform, sap basis +1 more
XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-23687
8.8 High
-
sap netweaver application server java
CRLF Injection vulnerability in SAP NetWeaver Application Server Java
CVE-2026-23686
3.4 Low
-
sap netweaver, sap se netweaver (jms service) +1 more
Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)
CVE-2026-23685
4.4 Medium
-
sap commerce cloud
Race condition vulnerability in SAP Commerce Cloud
CVE-2026-23684
5.9 Medium
-
sap se support tools plug-in, sap solution tools plug-in +1 more
Missing Authorization check in a function module in SAP Support Tools Plug-In
CVE-2026-23681
4.3 Medium
-
sap se netweaver application server abap and abap platform, sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 more
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2026-0509
9.6 Critical
-
sap businessobjects business intelligence platform
Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform
CVE-2026-0508
7.3 High
-
sap document management system, erp, s4core +2 more
Multiple vulnerabilities in BSP Applications of SAP Document Management System
CVE-2026-0505
6.1 Medium
-
sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 more
Denial of service (DOS) in SAP BusinessObjects BI Platform
CVE-2026-0490
7.5 High
-
sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
CVE-2026-0488
9.9 Critical
- Show olderLoading…