Skip to contentSap Se S/4hana vulnerabilities
- sap se s/4hana (linear asset management rap business object)Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)CVE-2026-891214.7 Medium
- sap se s/4hana (manage substitution/validation rules)Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)CVE-2026-891079.9 Critical
- sap se s/4hana (manage bank chains app)Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)CVE-2026-769624.3 Medium
- sap se s/4hana (finance for advanced payment management)Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)CVE-2026-769613.5 Low
- sap se s/4hana (finance for advanced payment management)Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)CVE-2026-769603.5 Low
- sap se s/4hana (finance for advanced payment management)Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)CVE-2026-769594.6 Medium
- sap se s/4hana (intercompany matching and reconciliation)SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)CVE-2026-447666.5 Medium
- sap se s/4hana (manage supply protection)Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)CVE-2026-667667.5 High
- sap se s/4hana (draft operation)Missing Authorization check in SAP S/4HANA (Draft operation)CVE-2026-447714.3 Medium
- sap se s/4hana project management (ppm-pro)SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)CVE-2026-447695.5 Medium
- sap se s/4hanaSQL Injection vulnerability in SAP S/4HANACVE-2026-447446.5 Medium
- sap se s/4hana condition maintenanceMissing Authorization check in SAP S/4HANA Condition MaintenanceCVE-2026-401336.3 Medium
- sap se s/4hana (sap enterprise search for abap)SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP)CVE-2026-342609.6 Critical
- sap human capital management, sap se human capital management for sap s/4hana +1 moreInformation Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANACVE-2026-342646.5 Medium
- sap manage reference structures, sap se s/4hana frontend odata service (manage reference structures) +1 moreMissing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)CVE-2026-276796.5 Medium
- sap se s/4hana backend odata service (manage reference structures)Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures)CVE-2026-276786.5 Medium
- sap se s/4hana odata service (manage reference equipment)Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)CVE-2026-276776.5 Medium
- sap se s/4hana odata service (manage technical object structures)Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)CVE-2026-276764.3 Medium
- sap se s/4hana (private cloud and on-premise)Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)CVE-2026-276734.9 Medium
- sap se s/4hana hcm portugal and sap erp hcm portugalMissing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalCVE-2026-276875.8 Medium
- sap se s/4hana defense & security (disconnected operations), sap s\/4hana defense \& security +1 moreMissing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)CVE-2026-243264.3 Medium
- sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 moreCode Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)CVE-2026-04889.9 Critical
- sap se netweaver application server abap and sap s/4hana, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANACVE-2026-04846.5 Medium
- sap se erp central component and sap s/4hana (sap ehs management)Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)CVE-2026-05036.4 Medium
- sap se s/4hana private cloud and on-premise (financials � general ledger)SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)CVE-2026-05019.9 Critical
- sap se s/4hana (private cloud and on-premise), sap s\/4 hana +1 moreCode Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)CVE-2026-04989.1 Critical
- sap se s/4hana landscape (sap e-recruiting bsp)Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)CVE-2025-429246.1 Medium
- sap se s/4hana (manage processing rules - for bank statements)Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements)CVE-2025-429394.3 Medium
- sap se s/4hana (private cloud or on-premise)Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)CVE-2025-429168.1 High
- sap se s/4hana (private cloud or on-premise)Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)CVE-2025-42957Public exploit9.9 Critical
- sap se s/4hana (bank communication management)Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)CVE-2025-429466.9 Medium
- sap se s/4hana (supplier invoice)CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)CVE-2025-429344.3 Medium
- sap se s/4hana and sap scm (characteristic propagation)Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation)CVE-2025-429679.9 Critical
- sap se s/4hana (enterprise event enablement)Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)CVE-2025-429936.7 Medium
- sap se s/4hana (bank account application)Missing Authorization check in SAP S/4HANA (Bank Account Application)CVE-2025-429914.3 Medium
- sap se s/4hana (manage processing rules - for bank statement)Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)CVE-2025-429874.3 Medium
- sap se s/4hana (manage central purchase contract application)Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application)CVE-2025-429845.4 Medium
- sap se s/4hana cloud private edition or on premise (scm master data layer (mdl))Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))CVE-2025-430108.3 High
- sap se s/4hana hcm portugal and sap erp hcm portugalMissing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalCVE-2025-430085.8 Medium
- sap se s/4hana (private cloud & on-premise)Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)CVE-2025-430036.4 Medium
- sap se s/4hana (private cloud)Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise)CVE-2025-274299.9 Critical
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)CVE-2025-274364.3 Medium
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)CVE-2025-274334.3 Medium
- sap se crm and sap s/4hana (interaction center)Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)CVE-2025-274303.5 Low
- sap se s/4hana (rbd)Missing Authorization check in SAP S/4HANA (RBD)CVE-2025-231884.3 Medium
- sap se s/4hana eprocurementCross-Site Scripting (XSS) in eProcurement on S/4HANACVE-2024-423786.1 Medium
- sap se s/4hana finance (advanced payment management), sap s4core +1 more[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)CVE-2024-371725.4 Medium
- sap se s/4hana (manage incoming payment files), sap s4hana, s\/4 hana +2 moreMissing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)CVE-2024-346916.5 Medium
- sap se s/4hana (document service handler for dps)Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS)CVE-2024-330026.1 Medium
- sap se s/4hana finance (advanced payment management), sap s\/4hana finance +1 moreMissing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)CVE-2024-217366.4 Medium
- Show moreLoading…