Sap Se vulnerabilities

Products

• 3d Visual Enterprise Viewer 127
• 3d Visual Enterprise Author 27
• Business One 18
• Hana Extended Application Services 15
• Disclosure Management 14
• Internet Graphics Server 13
• Business Objects Business Intelligence Platform 12
• Financial Consolidation 11
• Commerce 10
• Enable Now 10
• Netweaver Enterprise Portal 10
• Businessobjects Business Intelligence Platform 9
• Businessobjects Business Intelligence Platform (web Intelligence Html Interface) 9
• Manufacturing Integration And Intelligence 9
• Web Dispatcher 9
• Adaptive Server Enterprise 8
• Hana 8
• Internet Graphics Server (igs) 7
• Internet Graphics Service 7
• Netweaver And Abap Platform 7
• Netweaver As Abap 7
• Netweaver As Abap And Abap Platform 7
• S/4hana 7
• Cloud Connector 6
• Businessobjects Business Intelligence Platform (bi Workspace) 5
• Commerce Cloud 5
• Host Agent 5
• Netweaver (abap Server) And Abap Platform 5
• Netweaver Abap Server And Abap Platform (enqueue Server) 5
• Business Client 4
• Business Warehouse 4
• Contact Center 4
• Gateway 4
• Gui For Windows 4
• Hana Database 4
• Netweaver Application Server Java 4
• Netweaver As Java 4
• Netweaver (knowledge Management) 4
• Solution Manager 4
• Solution Manager (java Stack) 4

Show 69 moreShow less

• Sql Anywhere 4
• Adaptive Server Enterprise (ase) 3
• Business Objects 3
• Businessobjects Business Intelligence Platform (cmc) 3
• Business Objects Business Intelligence Platform (web Intelligence Html Interface) 3
• Content Server 3
• Enterprise Financial Services (s4core) 3
• Landscape Management 3
• Netweaver Application Server Abap And Abap Platform 3
• Netweaver As For Abap (rfc Gateway) 3
• Netweaver Process Integration(sap Xiesr) 3
• Netweaver Process Integration(sap Xitool) 3
• Process Integration (integration Builder Framework) 3
• Solution Manager (trace Analysis) 3
• Solution Manager (user Experience Monitoring) 3
• Ui 3
• Automated Note Search Tool (sap Basis) 2
• Cla-assistant 2
• Kyma 2
• Banking Services (generic Market Data) 2
• Business Objects Business Intelligence Platform (bi Launchpad) 2
• Businessobjects Business Intelligence Platform (central Management Server) 2
• Business Objects Business Intelligence Platform (cmc) 2
• Business Objects Business Intelligence Platform (cmc And Bi Launchpad) 2
• Businessobjects Business Intelligence Platform (web Intelligence) 2
• Business Objects Web Intelligence (bi Launchpad) 2
• Business One, Version For Sap Hana (cookbooks) 2
• Business Process Automation (bpa) By Redwood 2
• Commerce Cloud (accelerator Payment Mock) 2
• Crm 2
• Crm Webclient Ui (s4fnd) 2
• Crm Webclient Ui (sapscore) 2
• Crm Webclient Ui (webcuif) 2
• Customer Data Cloud (gigya) 2
• Enterprise Financial Services (ea-finserv) 2
• Enterprise Financial Services (sapscore) 2
• Enterprise Threat Detection 2
• Erp 2
• Erp (sap Fin) 2
• Fiori Launchpad (news Tile Application) 2
• Focused Run (simple Diagnostics Agent) 2
• Identity Management 2
• Iq 2
• Kernel (kernel) 2
• Kernel (krnl32nuc) 2
• Kernel (krnl32uc) 2
• Kernel (krnl64nuc) 2
• Kernel (krnl64uc) 2
• Manufacturing Execution 2
• Mobile Platform 2
• Netweaver 2
• Netweaver Abap Server And Abap Platform 2
• Netweaver Abap Server And Abap Platform (dispatcher) 2
• Netweaver Application Server Abap 2
• Netweaver As Abap (web Dynpro) 2
• Netweaver As For Abap And Abap Platform 2
• Netweaver As For Java (http Service) 2
• Netweaver As Java (lm Configuration Wizard) 2
• Netweaver (internet Communication Manager) 2
• Netweaver Master Data Management 2
• Netweaver (sap Basis) 2
• Netweaver Uddi Server (services Registry) 2
• S/4 Hana 2
• Solution Manager (diagnostics Agent) 2
• Startup Service 2
• Treasury And Risk Management (ea-finserv) 2
• Treasury And Risk Management (s4core) 2
• Ui5 2
• Ui For Sap Netweaver 7.00 2

Newest

• sap se cla-assistant Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure CVE-2026-89112 6.5 MediumOctober 13, 2026
• sap se manufacturing integration and intelligence Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence CVE-2026-76972 6.5 MediumOctober 13, 2026
• sap se manufacturing integration and intelligence Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence CVE-2026-76971 6.5 MediumSeptember 8, 2026
• sap se netweaver and abap platform Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform CVE-2026-76963 4.3 MediumSeptember 8, 2026
• sap se businessobjects business intelligence platform (central management server) Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) CVE-2026-66763 7.9 HighAugust 11, 2026
• sap se manufacturing integration and intelligence Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) CVE-2026-58244 4.3 MediumAugust 11, 2026
• sap se manufacturing integration and intelligence Missing Authorization Check in SAP Manufacturing Integration and Intelligence CVE-2026-44765 7.3 HighAugust 11, 2026
• sap se manufacturing integration and intelligence Missing Authorization Check in SAP Manufacturing Integration and Intelligence CVE-2026-44764 7.3 HighAugust 11, 2026
• sap se manufacturing integration and intelligence Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence CVE-2026-44763 7.6 HighAugust 11, 2026
• sap se manufacturing integration and intelligence Code Injection vulnerability in Manufacturing Integration and Intelligence CVE-2026-44758 9.1 CriticalAugust 11, 2026
• sap se netweaver and abap platform Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform CVE-2026-34265 9.8 CriticalAugust 11, 2026
• sap se s/4hana SQL Injection vulnerability in SAP S/4HANA CVE-2026-44744 6.5 MediumJune 9, 2026
• sap se business objects Security Misconfiguration vulnerability in SAP Business Objects CVE-2026-44743 3.7 LowJune 9, 2026
• sap se gateway Information Disclosure vulnerability in SAP Gateway CVE-2026-44749 4.3 MediumMay 26, 2026
• sap se financial consolidation Denial of service (DoS) in SAP Financial Consolidation CVE-2026-40136 4.3 MediumMay 12, 2026
• sap se netweaver application server abap, sap basis +1 more Multiple vulnerabilities in SAP NetWeaver Application Server ABAP CVE-2025-42956 6.1 MediumJuly 8, 2025
• sap basis, sap se netweaver and abap platform +1 more Missing Authorization check in SAP NetWeaver and ABAP Platform CVE-2025-42986 4.3 MediumJuly 8, 2025
• sap se financial consolidation Authentication Bypass Vulnerability in SAP Financial Consolidation CVE-2025-30016 9.8 CriticalApril 8, 2025
• sap web dispatcher Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher CVE-2024-47590 8.8 HighNovember 12, 2024
• sap se netweaver and abap platform, sap netweaver application server abap +1 more Denial of service (DOS) in SAP NetWeaver and ABAP platform CVE-2024-33001 6.5 MediumJune 11, 2024
• sap se financial consolidation Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation CVE-2024-37178 5.0 MediumJune 11, 2024
• sap financial consolidation Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation CVE-2024-37177 8.1 HighJune 11, 2024
• sap se enable now, sap enable now enable now consump del, enable now wpb manager +2 more +4 more Clickjacking vulnerability in SAP Enable Now CVE-2023-36920 6.1 MediumOctober 30, 2023
• sap privileges Privileges Memory Corruption (Out-of-bound write) CVE-2023-40307 6.3 MediumSeptember 28, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Missing Authorization check in SAP CommonCryptoLib CVE-2023-40309 9.8 CriticalSeptember 12, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Memory Corruption vulnerability in SAP CommonCryptoLib CVE-2023-40308 7.5 HighSeptember 12, 2023
• sap se s/4hana (manage catalog items and cross-catalog search), sap s\/4hana +1 more URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) CVE-2023-40306 6.1 MediumSeptember 8, 2023
• sap web dispatcher Memory Corruption vulnerability in SAP Web Dispatcher CVE-2023-35871 7.7 HighJuly 11, 2023
• sap sql anywhere Denial of Service (DoS) vulnerability in SAP SQL Anywhere CVE-2023-33990 7.8 HighJuly 11, 2023
• sap web dispatcher Request smuggling and request concatenation in SAP Web Dispatcher CVE-2023-33987 8.6 HighJuly 11, 2023
• sap financial consolidation SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input... CVE-2022-41260 6.1 MediumNovember 8, 2022
• sap sql anywhere SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users... CVE-2022-41259 6.5 MediumNovember 8, 2022
• sap financial consolidation Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an... CVE-2022-41258 6.5 MediumNovember 8, 2022
• sap se netweaver abap server and abap platform, sap netweaver application server abap +1 more SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users... CVE-2022-41215 4.7 MediumNovember 8, 2022
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform... CVE-2022-41214 8.7 HighNovember 8, 2022
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform... CVE-2022-41212 4.9 MediumNovember 8, 2022
• sap 3d visual enterprise author, 3d visual enterprise viewer +1 more Due to lack of proper memory management, when a victim opens manipulated file received from... CVE-2022-41211 7.0 HighNovember 8, 2022
• sap financial consolidation Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an... CVE-2022-41208 5.4 MediumNovember 8, 2022
• sap biller direct SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When... CVE-2022-41207 6.1 MediumNovember 8, 2022
• sap gui, sap se gui for windows +1 more SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful... CVE-2022-41205 5.5 MediumNovember 8, 2022
• sap businessobjects business intelligence, sap se businessobjects business intelligence platform (central management console and bi launchpad) +1 more In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad)... CVE-2022-41203 9.9 CriticalNovember 8, 2022
• sap customer data cloud, sap se customer data cloud (gigya) +1 more SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number... CVE-2022-41210 5.2 MediumOctober 11, 2022
• sap customer data cloud, sap se customer data cloud (gigya) +1 more SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method... CVE-2022-41209 5.2 MediumOctober 11, 2022
• sap businessobjects business intelligence, sap se businessobjects business intelligence platform (analysis for olap) +1 more SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430,... CVE-2022-41206 5.4 MediumOctober 11, 2022
• sap commerce An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,... CVE-2022-41204 8.8 HighOctober 11, 2022
• sap 3d visual enterprise viewer Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (... CVE-2022-41202 7.8 HighOctober 11, 2022
• sap 3d visual enterprise viewer Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere... CVE-2022-41201 7.8 HighOctober 11, 2022
• sap 3d visual enterprise viewer Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector... CVE-2022-41200 7.8 HighOctober 11, 2022
• sap 3d visual enterprise viewer Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (... CVE-2022-41199 7.8 HighOctober 11, 2022
• sap 3d visual enterprise viewer Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp,... CVE-2022-41198 7.8 HighOctober 11, 2022
• Show olderLoading…