Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se netweaver and abap platform (service data collection)Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)CVE-2025-274287.7 High
- sap se kmc wpcInformation Disclosure vulnerability in SAP KMC WPCCVE-2025-266575.3 Medium
- sap se commerce cloud (public cloud)Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)CVE-2025-266546.8 Medium
- sap se netweaver application server abap (applications based on sap gui for html)Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)CVE-2025-266534.7 Medium
- sap se netweaver application server abapMixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAPCVE-2025-231868.5 High
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)CVE-2025-274364.3 Medium
- sap se commerce (swagger ui)Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)CVE-2025-274348.8 High
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)CVE-2025-274334.3 Medium
- sap se electronic invoicing for brazil (edocument cockpit)Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit)CVE-2025-274322.4 Low
- sap se netweaver application server javaCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server JavaCVE-2025-274315.4 Medium
- sap se crm and sap s/4hana (interaction center)Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)CVE-2025-274303.5 Low
- sap se netweaver (abap class builder)Missing Authorization check in SAP NetWeaver (ABAP Class Builder)CVE-2025-266618.8 High
- sap se fiori apps (posting library)Broken Access Control in SAP Fiori apps (Posting Library)CVE-2025-266604.3 Medium
- sap se netweaver application server abap (applications based on sap gui for html)Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)CVE-2025-266596.1 Medium
- sap se business one (service layer)Broken Authentication in SAP Business One (Service Layer)CVE-2025-266586.8 Medium
- sap se s/4hana (manage purchasing info records)Missing Authorization check in S/4HANA (Manage Purchasing Info Records)CVE-2025-266564.3 Medium
- sap se just in timeMissing Authorization check in SAP JIT(Outbound)CVE-2025-266553.1 Low
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)CVE-2025-252455.4 Medium
- sap se business warehouse (process chains)Missing Authorization Check in SAP Business Warehouse (Process Chains)CVE-2025-252445.7 Medium
- sap se netweaver application server abapCross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAPCVE-2025-252426.1 Medium
- sap se netweaver enterprise portal (obn component)Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)CVE-2025-231945.3 Medium
- sap se s/4hana (rbd)Missing Authorization check in SAP S/4HANA (RBD)CVE-2025-231884.3 Medium
- sap se business objects business intelligence platformInformation Disclosure in SAP Business Objects Business Intelligence PlatformCVE-2025-231854.1 Medium
- sap se web dispatcher and internet communication managerInformation Disclosure vulnerability in SAP Web Dispatcher and Internet Communication ManagerCVE-2025-00714.9 Medium
- sap se businessobjects business intelligence platformCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)CVE-2025-00624.7 Medium
- sap se supplier relationship management (master data management catalog)Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)CVE-2025-252438.6 High
- sap se fiori apps reference library (my overtime requests)Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)CVE-2025-252415.4 Medium
- sap se approuter node.js packageAuthentication bypass via authorization code injection in SAP ApprouterCVE-2025-24876Fix available8.1 High
- sap se commerceSameSite Defense in Depth not applied for some cookies in SAP CommerceCVE-2025-248756.8 Medium
- sap se commerce (backoffice)Missing Defense in Depth Against Clickjacking in SAP Commerce BackofficeCVE-2025-248746.8 Medium
- sap se abap platform (abap build framework)Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)CVE-2025-248724.3 Medium
- sap se gui for windowsInsecure Key & Secret Management vulnerability in SAP GUI for WindowsCVE-2025-248706.0 Medium
- sap se netweaver application server javaInformation Disclosure vulnerability in SAP NetWeaver Application Server JavaCVE-2025-248694.3 Medium
- sap se hana extended application services, advanced model (user account and authentication services)Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)CVE-2025-248687.1 High
- sap se businessobjects platform (bi launchpad)Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad)CVE-2025-248676.1 Medium
- sap se netweaver server abap, sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAPCVE-2025-231935.3 Medium
- sap se fiori for sap erpCache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERPCVE-2025-231913.1 Low
- sap se netweaver and abap platform (st-pi)Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)CVE-2025-231904.3 Medium
- sap se netweaver and abap platform (sdccn)Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)CVE-2025-231894.3 Medium
- sap se netweaver and abap platform (sdccn)Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)CVE-2025-231875.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreImproper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)CVE-2025-00648.7 High
- sap se netweaver application server javaCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server JavaCVE-2025-0054Public exploit5.4 Medium
- sap se netweaver application server for abap and abap platformImproper Authentication in SAP NetWeaver ABAP Server and ABAP PlatformCVE-2025-00709.9 Critical
- sap se sapsetupDLL Hijacking vulnerability in SAPSetupCVE-2025-00697.8 High
- sap se netweaver application server abapMissing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAPCVE-2025-00684.3 Medium
- sap se netweaver application server javaMissing Authorization check in SAP NetWeaver Application Server JavaCVE-2025-00676.3 Medium
- sap se netweaver as for abap and abap platform (internet communication framework), sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)CVE-2025-00669.9 Critical
- sap se netweaver as abap and abap platform, sap basis +1 moreSQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2025-00638.8 High
- sap businessobjects business intelligence platformMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformCVE-2025-00618.7 High
- sap businessobjects business intelligence platformMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformCVE-2025-00606.5 Medium
- Show moreLoading…