Sap Se vulnerabilities

Products

• Businessobjects Business Intelligence Platform 36
• Business One 21
• Netweaver Enterprise Portal 20
• Netweaver Application Server For Abap And Abap Platform 18
• Enable Now 16
• Netweaver As Abap And Abap Platform 16
• Business Objects Business Intelligence Platform 15
• Commerce 14
• Netweaver Application Server Abap 14
• Netweaver Application Server For Abap 14
• Commerce Cloud 13
• Netweaver Application Server Abap And Abap Platform 13
• Gui For Windows 12
• Netweaver Application Server Java 12
• Business Ai Platform (approuter) 11
• Businessobjects Business Intelligence Platform (web Intelligence Html Interface) 10
• Cloud Connector 10
• Host Agent 9
• Netweaver As Java 9
• Crm Webclient Ui 8
• Solution Manager 8
• Business Connector 7
• Hana Database 7
• Manufacturing Integration And Intelligence 7
• Netweaver 7
• Fiori App (intercompany Balance Reconciliation) 6
• Businessobjects Business Intelligence 5
• Businessobjects Business Intelligence Platform (web Intelligence) 5
• Sapcar 5
• Netweaver Application Server Abap (applications Based On Sap Gui For Html) 5
• Supplier Relationship Management (live Auction Cockpit) 5
• Sapui5 5
• Web Dispatcher 5
• Commoncryptolib 4
• Financial Consolidation 4
• Identity Management 4
• Landscape Management 4
• Netweaver And Abap Platform 4
• Abap Platform 3
• Businessobjects Web Intelligence 3

Show 70 moreShow less

• Business One (sld) 3
• Business Planning And Consolidation 3
• Crm (webclient Ui) 3
• Data Services Management Console 3
• Fiori Launchpad 3
• Hcm (my Timesheet Fiori 2.0 Application) 3
• Landscape Transformation 3
• Mdm Server 3
• Netweaver Abap Server And Abap Platform 3
• Netweaver And Abap Platform (sdccn) 3
• Netweaver As For Abap And Abap Platform 3
• Netweaver As For Java (adobe Document Services) 3
• Netweaver (internet Communication Manager) 3
• Powerdesigner 3
• S/4hana (finance For Advanced Payment Management) 3
• Solution Manager (diagnostics Agent) 3
• Supplier Relationship Management 3
• Business Server Pages Application (taf Applauncher) 2
• Cla Assistant 2
• Approuter 2
• Biller Direct 2
• Businessobjects Bi Platform 2
• Businessobjects Business Intelligence Platform (central Management Console) 2
• Businessobjects Business Intelligence Platform (version Management System) 2
• Business One (service Layer) 2
• Business Warehouse And Sap Plug-in Basis 2
• Business Warehouse - Business Planning And Simulation 2
• Commerce Backoffice 2
• Content Server 2
• Crm Webclient Ui 2
• Document Builder 2
• Document Management System 2
• Extended Application Services And Runtime (xsa) 2
• Fiori (launchpad) 2
• Landscape Transformation (analysis Platform) 2
• Lt Replication Server 2
• Master Data Governance 2
• Netweaver Abap Platform 2
• Netweaver And Abap Platform 2
• Netweaver And Abap Platform (application Server Abap) 2
• Netweaver Application Server Abap (applications Based On Business Server Pages) 2
• Netweaver Application Server Abap (bic Document) 2
• Netweaver As Abap, Sap Netweaver As Java And Abap Platform Of S/4hana On-premise 2
• Netweaver As Java (user Admin Application) 2
• Netweaver Enterprise Portal Administration 2
• Netweaver Enterprise Portal (kmc) 2
• Netweaver (guided Procedures) 2
• Netweaver Process Integration (runtime Workbench) 2
• Netweaver Visual Composer 2
• Netweaver (visual Composer Development Server) 2
• Plant Connectivity 2
• Powerdesigner Client 2
• S/4 Hana (cash Management) 2
• S/4hana Core 2
• S/4hana Finance (advanced Payment Management) 2
• S/4hana Hcm Portugal And Sap Erp Hcm Portugal 2
• S/4 Hana (manage Bank Statement Reprocessing Rules) 2
• S/4hana (manage Bank Statements) 2
• S/4hana (private Cloud And On-premise) 2
• S/4hana (private Cloud Or On-premise) 2
• Service Parts Management (spm) 2
• Shared Service Framework 2
• Solution Tools Plug-in (st-pi) 2
• Sapssoext 2
• Student Life Cycle Management (slcm) 2
• Supplier Relationship Management (master Data Management Catalog) 2
• Supplier Relationship Management (sicf Handler In Srm Catalog) 2
• Supply Chain Management 2
• Web Dispatcher And Internet Communication Manager 2
• Web Dispatcher, Internet Communication Manager And Sap Content Server 2

Newest

• sap se hana (display product catalog based on customs declaration) Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration) CVE-2026-89124 4.3 MediumOctober 13, 2026
• sap se netweaver enterprise portal Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal CVE-2026-89122 6.1 MediumOctober 13, 2026
• sap se s/4hana (linear asset management rap business object) Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) CVE-2026-89121 4.7 MediumOctober 13, 2026
• sap se abap platform Missing authorization check in SAP ABAP Platform CVE-2026-89120 7.1 HighOctober 13, 2026
• sap se netweaver enterprise portal Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal CVE-2026-89118 5.3 MediumOctober 13, 2026
• sap se netweaver enterprise portal Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal CVE-2026-89117 6.1 MediumOctober 13, 2026
• sap se yeoman-ui OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code CVE-2026-89116 5.9 MediumOctober 13, 2026
• sap se commerce cloud (ootb code) SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) CVE-2026-89113 8.8 HighOctober 13, 2026
• sap se cla-assistant Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure CVE-2026-89112 6.5 MediumOctober 13, 2026
• sap se cloud OAuth2 SSRF vulnerability in SAP Cloud SDK for Python CVE-2026-89111 10.0 CriticalOctober 13, 2026
• sap se netweaver visual composer Broken Access Control in SAP NetWeaver Visual Composer CVE-2026-89110 9.9 CriticalOctober 13, 2026
• sap se manufacturing integration and intelligence (configuration service) Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) CVE-2026-89108 9.1 CriticalOctober 13, 2026
• sap se s/4hana (manage substitution/validation rules) Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) CVE-2026-89107 9.9 CriticalOctober 13, 2026
• sap se sapui5 Cross Site Scripting (XSS) vulnerability in SAPUI5 CVE-2026-89106 4.4 MediumOctober 13, 2026
• sap se sap/cloud-security-services-integration-library Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library CVE-2026-89105 4.2 MediumOctober 13, 2026
• sap se netweaver application server abap (applications based on sap gui for html) Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) CVE-2026-76976 5.4 MediumOctober 13, 2026
• sap se sapui5 (support assistant overlay) Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay) CVE-2026-76975 6.1 MediumOctober 13, 2026
• sap se manufacturing integration and intelligence Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence CVE-2026-76972 6.5 MediumOctober 13, 2026
• sap se netweaver and sap web dispatcher (internet communication manager) Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) CVE-2026-58249 Public exploit 7.5 HighOctober 13, 2026
• sap se cloud connector Improper Authorization check in SAP Cloud Connector CVE-2026-58242 3.5 LowOctober 13, 2026
• sap se fiori launchpad Information Disclosure vulnerability in SAP Fiori Launchpad CVE-2026-76974 5.3 MediumSeptember 22, 2026
• sap se sapui5(frame options allowlist) Clickjacking vulnerability in SAPUI5(Frame Options Allowlist) CVE-2026-76977 4.3 MediumSeptember 8, 2026
• sap se manufacturing integration and intelligence Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence CVE-2026-76971 6.5 MediumSeptember 8, 2026
• sap se cloud application programming model (cap) Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) CVE-2026-76969 Fix available 9.4 CriticalSeptember 8, 2026
• sap se web dispatcher, internet communication manager and sap content server Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server CVE-2026-76968 6.5 MediumSeptember 8, 2026
• sap se netweaver business client Insecure Deserialization in SAP NetWeaver Business Client CVE-2026-76967 7.8 HighSeptember 8, 2026
• sap se netweaver and abap platform Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform CVE-2026-76963 4.3 MediumSeptember 8, 2026
• sap se s/4hana (manage bank chains app) Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) CVE-2026-76962 4.3 MediumSeptember 8, 2026
• sap se s/4hana (finance for advanced payment management) Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) CVE-2026-76961 3.5 LowSeptember 8, 2026
• sap se s/4hana (finance for advanced payment management) Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) CVE-2026-76960 3.5 LowSeptember 8, 2026
• sap se s/4hana (finance for advanced payment management) Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) CVE-2026-76959 4.6 MediumSeptember 8, 2026
• sap se integration suite XML External Entity (XXE) Vulnerability in SAP Integration Suite CVE-2026-76958 8.5 HighSeptember 8, 2026
• sap se netweaver (sap gui for java) Improper Access Control in SAP NetWeaver (SAP GUI for Java) CVE-2026-66768 9.0 CriticalSeptember 8, 2026
• sap se netweaver application server for abap and abap platform Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2026-66767 7.7 HighSeptember 8, 2026
• sap se netweaver (message server) Missing Authentication check in SAP NetWeaver (Message Server) CVE-2026-58240 9.8 CriticalSeptember 8, 2026
• sap se process integration (soap adapter) Denial of Service vulnerability in SAP Process Integration (SOAP Adapter) CVE-2026-58234 2.2 LowSeptember 8, 2026
• sap se s/4hana (intercompany matching and reconciliation) SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) CVE-2026-44766 6.5 MediumSeptember 8, 2026
• sap se extended passport (epp) processing Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing CVE-2026-44756 10.0 CriticalSeptember 8, 2026
• sap se s/4hana (manage supply protection) Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection) CVE-2026-66766 7.5 HighAugust 25, 2026
• sap se commerce cloud (data hub adapter) Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 Public exploit 10.0 CriticalAugust 11, 2026
• sap se netweaver application server abap Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP CVE-2026-66779 6.3 MediumAugust 11, 2026
• sap approuter, sap se business ai platform (approuter) +1 more Multiple vulnerabilities in SAP Business AI Platform (Approuter) CVE-2026-66778 5.3 MediumAugust 11, 2026
• sap approuter, sap se business ai platform (approuter) +1 more Multiple vulnerabilities in SAP Business AI Platform (Approuter) CVE-2026-66777 5.9 MediumAugust 11, 2026
• sap approuter, sap se business ai platform (approuter) +1 more Multiple vulnerabilities in SAP Business AI Platform (Approuter) CVE-2026-66776 5.9 MediumAugust 11, 2026
• sap approuter, sap se business ai platform (approuter) +1 more Multiple vulnerabilities in SAP Business AI Platform (Approuter) CVE-2026-66775 4.3 MediumAugust 11, 2026
• sap approuter, sap se business ai platform (approuter) +1 more Multiple vulnerabilities in SAP Business AI Platform (Approuter) CVE-2026-66774 3.7 LowAugust 11, 2026
• sap se odata Server-controlled `__next` URL is not checking cross-origin CVE-2026-66773 5.9 MediumAugust 11, 2026
• sap se businessobjects business intelligence platform (admin tools) Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) CVE-2026-66772 4.3 MediumAugust 11, 2026
• sap se sapui5 Cross Site Scripting (XSS) vulnerability in SAPUI5 CVE-2026-66771 6.1 MediumAugust 11, 2026
• sap se social intelligence SQL Injection vulnerability in SAP Social Intelligence CVE-2026-66770 6.3 MediumAugust 11, 2026
• Show olderLoading…