Skip to contentSap vulnerabilities
Products
Show 140 moreShow less
Newest
- sap se abap based sap systems, sap solution tools plug-in +1 moreMissing Authorization Check in ABAP based SAP systemsCVE-2026-04865.0 Medium
- sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 moreDenial of service (DOS) vulnerability in SAP BusinessObjects BI PlatformCVE-2026-04857.5 High
- sap se netweaver application server abap and sap s/4hana, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANACVE-2026-04846.5 Medium
- sap business connectorCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2026-05146.1 Medium
- sap supplier relationship management, sap se supplier relationship management (sicf handler in srm catalog) +1 moreOpen Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)CVE-2026-05134.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2026-05068.1 High
- sap introscope enterprise manager, sap se wily introscope enterprise manager (workstation) +1 moreRemote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)CVE-2026-05009.6 Critical
- sap se s/4hana (private cloud and on-premise), sap s\/4 hana +1 moreCode Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)CVE-2026-04989.1 Critical
- sap hana databasePrivilege escalation vulnerability in SAP HANA databaseCVE-2026-04928.8 High
- sap business connectorPath Traversal vulnerability in SAP Business ConnectorCVE-2025-428946.8 Medium
- sap business connectorOpen Redirect vulnerability in SAP Business ConnectorCVE-2025-428936.1 Medium
- sap business connectorOS Command Injection vulnerability in SAP Business ConnectorCVE-2025-428926.8 Medium
- sap business connectorReflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2025-428866.1 Medium
- sap netweaver application server javaMissing Authentication check in SAP NetWeaver Application Server JavaCVE-2025-429265.3 Medium
- sap supplier relationship managementCross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship ManagementCVE-2025-429206.1 Medium
- sap se netweaver application server for abap (background processing), sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing)CVE-2025-429184.3 Medium
- sap se netweaver (service data download), sap basis +1 moreMissing Authorization check in SAP NetWeaver (Service Data Download)CVE-2025-429115.0 Medium
- sap se netweaver application server for abap, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2025-429365.4 Medium
- sap se netweaver application server abap, sap basis +1 moreMultiple vulnerabilities in SAP NetWeaver Application Server ABAPCVE-2025-429566.1 Medium
- sap basis, sap se netweaver and abap platform +1 moreMissing Authorization check in SAP NetWeaver and ABAP PlatformCVE-2025-429864.3 Medium
- sap netweaver, sap se netweaver (rfc enabled function module) +1 moreMissing Authorization check in SAP NetWeaver (RFC enabled function module)CVE-2025-429685.0 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreServer-Side Request Forgery in SAP Business Objects Business Intelligence PlatformCVE-2025-429883.7 Low
- sap businessobjects business intelligence, sap se businessobjects business intelligence (bi workspace) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)CVE-2025-231928.2 High
- sap netweaver, sap se netweaver (visual composer development server) +1 moreInsecure Deserialization in SAP NetWeaver (Visual Composer development server)CVE-2025-42999In KEVEPSS 12.9%9.1 Critical
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300188.6 High
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-3001210.0 Critical
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300115.3 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300106.1 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300096.1 Medium
- sap netweaver, sap se netweaver (visual composer development server) +1 moreMissing Authorization check in SAP NetWeaver (Visual Composer development server)CVE-2025-31324In KEVPublic exploitEPSS 99.5%10.0 Critical
- sap businessobjects business intelligence platformInsecure File permissions vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2025-313326.6 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)CVE-2025-252455.4 Medium
- sap se netweaver server abap, sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAPCVE-2025-231935.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreImproper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)CVE-2025-00648.7 High
- sap se netweaver as for abap and abap platform (internet communication framework), sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)CVE-2025-00669.9 Critical
- sap se netweaver as abap and abap platform, sap basis +1 moreSQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2025-00638.8 High
- sap businessobjects business intelligence platformMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformCVE-2025-00618.7 High
- sap businessobjects business intelligence platformMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformCVE-2025-00606.5 Medium
- sap se business workflow and sap flexible workflow, sap basis +1 moreInformation Disclosure vulnerability in SAP Business Workflow and SAP Flexible WorkflowCVE-2025-00586.5 Medium
- sap se netweaver application server for abap and abap platform, sap basis +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformCVE-2025-00535.3 Medium
- sap businessobjects business intelligence platformInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence platformCVE-2024-327325.3 Medium
- sap host agentLocal Privilege Escalation in SAP Host AgentCVE-2024-475956.3 Medium
- sap netweaver application server java, sap se netweaver application server java (logon application) +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)CVE-2024-475925.3 Medium
- sap web dispatcherCross-Site Scripting (XSS) vulnerability in SAP Web DispatcherCVE-2024-475908.8 High
- sap se netweaver application server for abap and abap platform, sap netweaver abap application server +1 moreNULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformCVE-2024-475865.3 Medium
- sap se netweaver as java (system landscape directory), sap netweaver system landscape directory +1 moreMissing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)CVE-2024-423726.5 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)CVE-2024-475945.4 Medium
- sap s\/4 hana, sap se s/4 hana (manage bank statements) +1 moreHTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)CVE-2024-452824.3 Medium
- sap commerce backofficeCross-Site Scripting (XSS) vulnerability in SAP Commerce BackofficeCVE-2024-452785.4 Medium
- sap se hana client, sap hana-client +1 morePrototype Pollution vulnerability in SAP HANA ClientCVE-2024-45277Fix available4.3 Medium
- Show moreLoading…