Sap Hana vulnerabilities

• sap hana cockpit, hana database explorer, sap se hana cockpit and hana database explorer +2 more Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer CVE-2026-34262 5.0 MediumApril 14, 2026
• sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 more Information Disclosure vulnerability in S/4HANA (Manage Payment Media) CVE-2026-24314 4.3 MediumFebruary 24, 2026
• sap se s/4hana defense & security (disconnected operations), sap s\/4hana defense \& security +1 more Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations) CVE-2026-24326 4.3 MediumFebruary 10, 2026
• sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) CVE-2026-0488 9.9 CriticalFebruary 10, 2026
• sap se s/4hana (private cloud and on-premise), sap s\/4 hana +1 more Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) CVE-2026-0498 9.1 CriticalJanuary 13, 2026
• sap hana database Privilege escalation vulnerability in SAP HANA database CVE-2026-0492 8.8 HighJanuary 13, 2026
• sap s\/4 hana, sap se s/4 hana (manage bank statements) +1 more HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) CVE-2024-45282 4.3 MediumOctober 8, 2024
• sap se hana client, sap hana-client +1 more Prototype Pollution vulnerability in SAP HANA Client CVE-2024-45277 Fix available 4.3 MediumOctober 8, 2024
• sap se s/4hana (manage incoming payment files), sap s4hana, s\/4 hana +2 more Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files) CVE-2024-34691 6.5 MediumJune 11, 2024
• sap se bw, sap bw\/4hana, sap se bw/4hana transformation and data transfer process +1 more +3 more Missing Authorization check in SAP BW/4HANA Transformation and DTP CVE-2024-37176 5.5 MediumJune 11, 2024
• sap se s/4 hana (manage bank statement reprocessing rules), sap s\/4hana +1 more Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) CVE-2024-4138 4.3 MediumMay 14, 2024
• sap se s/4hana finance (advanced payment management), sap s\/4hana finance +1 more Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management) CVE-2024-21736 6.4 MediumJanuary 9, 2024
• sap se enable now, sap enable now enable now consump del, enable now wpb manager +2 more +4 more Clickjacking vulnerability in SAP Enable Now CVE-2023-36920 6.1 MediumOctober 30, 2023
• sap s\/4hana, sap se s/4hana core +1 more Information Disclosure Vulnerability in Statutory Reporting CVE-2023-42475 4.3 MediumOctober 10, 2023
• sap se s/4hana (manage withholding tax items), sap s\/4hana +1 more Missing Authorization Check In S/4HANA (Manage Withholding Tax Items) CVE-2023-42473 5.4 MediumOctober 10, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Missing Authorization check in SAP CommonCryptoLib CVE-2023-40309 9.8 CriticalSeptember 12, 2023
• sap s\/4 hana, sap se s4 hana abap (manage checkbook apps) +1 more Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps) CVE-2023-41368 2.7 LowSeptember 12, 2023
• sap se s/4hana (create single payment application), sap s\/4 hana +1 more External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) CVE-2023-41369 3.5 LowSeptember 12, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Memory Corruption vulnerability in SAP CommonCryptoLib CVE-2023-40308 7.5 HighSeptember 12, 2023
• sap se s/4hana (manage catalog items and cross-catalog search), sap s\/4hana +1 more URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) CVE-2023-40306 6.1 MediumSeptember 8, 2023
• sap business warehouse, sap se business warehouse and sap bw/4hana, sap bw\/4hana +2 more Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA CVE-2023-33992 4.5 MediumJuly 11, 2023
• sap s/4 hana (map treasury correspondence format data), s\/4hana +1 more SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization... CVE-2023-24524 6.5 MediumFebruary 14, 2023
• sap se s/4hana, sap s\/4hana +1 more Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101,... CVE-2022-32248 5.3 MediumJuly 12, 2022
• sap sapscore, sap se s/4hana, sap s\/4hana +2 more Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application... CVE-2022-31597 5.4 MediumJuly 12, 2022
• sap erp financial accounting, erp localization for cee countries, s\/4hana +3 more +5 more Due to improper authorization check, business users who are using Israeli File from SHAAM program... CVE-2022-31589 6.5 MediumJune 14, 2022
• sap s\/4hana, sap se s/4hana (supplier factsheet and enterprise search for business partner, supplier and customer) +1 more S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business... CVE-2022-22542 6.5 MediumFebruary 9, 2022
• sap se s/4hana, sap s\/4hana +1 more The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,... CVE-2022-22531 8.1 HighJanuary 14, 2022
• sap se s/4hana, sap s\/4hana +1 more The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,... CVE-2022-22530 8.1 HighJanuary 14, 2022
• sap landscape transformation, landscape transformation replication server, s\/4hana +4 more +6 more Due to improper input sanitization, an authenticated user with certain specific privileges can... CVE-2021-38176 9.9 CriticalSeptember 14, 2021
• sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 more Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9... CVE-2021-27616 7.8 HighMay 11, 2021
• sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 more SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install... CVE-2021-27614 7.3 HighMay 11, 2021
• sap hana LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP... CVE-2021-21484 7.7 HighMarch 9, 2021
• sap hana database SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who... CVE-2021-21474 6.5 MediumFebruary 9, 2021
• sap business warehouse, sap se bw/4hana, sap bw\/4hana +2 more SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA,... CVE-2021-21466 9.9 CriticalJanuary 12, 2021
• sap business warehouse, sap se bw4hana, sap bw\/4hana +2 more SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782,... CVE-2020-26838 9.1 CriticalDecember 9, 2020
• sap se s4 hana (sap landscape transformation), sap netweaver application server abap, s\/4 hana +1 more +3 more SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700,... CVE-2020-26832 7.6 HighDecember 9, 2020
• sap hana database SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML... CVE-2020-26834 4.2 MediumDecember 9, 2020
• sap se as abap(dmis), s4 hana(dmis), sap as abap\(dmis\) +1 more +3 more SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730,... CVE-2020-26808 9.1 CriticalNovember 10, 2020
• sap erp, sap se s/4 hana, sap s\/4hana +2 more SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he... CVE-2020-6316 4.3 MediumNovember 10, 2020
• sap bank analyzer, s\/4hana for financial products subledger, sap se banking services from sap 9.0(bank analyzer) +1 more +3 more Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial... CVE-2020-6311 6.5 MediumSeptember 9, 2020
• sap se s/4 hana (fiori ui for general ledger accounting), sap s\/4 hana fiori ui for general ledger accounting +1 more SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform... CVE-2020-6273 4.3 MediumAugust 12, 2020
• sap erp, sap se s/4 hana, sap s\/4hana +2 more Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and... CVE-2020-6212 5.4 MediumApril 24, 2020
• sap banking services from sap, s\/4hana financial products subledger, sap se s/4 hana (financial products subledger and banking services) (fsappl) +1 more +3 more SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500... CVE-2020-6233 4.3 MediumApril 14, 2020
• sap se s/4hana (financial products subledger), sap s\/4hana +1 more SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object... CVE-2020-6214 4.7 MediumApril 14, 2020
• sap netweaver, s\/4hana, sap se netweaver (sap basis) +1 more +3 more Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP... CVE-2020-6185 5.4 MediumFebruary 12, 2020
• sap netweaver, s\/4hana, sap se automated note search tool (sap basis) +2 more Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP... CVE-2020-6184 6.1 MediumFebruary 12, 2020
• sap erp, s\/4 hana, sap se erp (sap appl) +2 more +4 more VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN... CVE-2020-6188 6.3 MediumFebruary 12, 2020
• sap erp sales, s4hana sales, sap se s4hana sales (s4core) +1 more +3 more Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16,... CVE-2019-0386 6.3 MediumNovember 13, 2019
• sap hana database SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed... CVE-2019-0350 7.5 HighNovember 4, 2019
• sap hana The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute... CVE-2019-0357 6.7 MediumSeptember 10, 2019
• Show olderLoading…