Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se mdm serverMultiple vulnerabilities in SAP MDM ServerCVE-2025-429965.6 Medium
- sap se mdm serverMultiple vulnerabilities in SAP MDM ServerCVE-2025-429957.5 High
- sap se mdm serverMultiple vulnerabilities in SAP MDM ServerCVE-2025-429947.5 High
- sap se s/4hana (enterprise event enablement)Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)CVE-2025-429936.7 Medium
- sap se s/4hana (bank account application)Missing Authorization check in SAP S/4HANA (Bank Account Application)CVE-2025-429914.3 Medium
- sap se sapui5 applicationsHTML Injection in Unprotected SAPUI5 applicationsCVE-2025-429903.0 Low
- sap se netweaver application server for abapMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2025-429899.6 Critical
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreServer-Side Request Forgery in SAP Business Objects Business Intelligence PlatformCVE-2025-429883.7 Low
- sap se s/4hana (manage processing rules - for bank statement)Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)CVE-2025-429874.3 Medium
- sap se s/4hana (manage central purchase contract application)Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application)CVE-2025-429845.4 Medium
- sap se business warehouse and sap plug-in basisMissing Authorization check in SAP Business Warehouse and SAP Plug-In BasisCVE-2025-429838.5 High
- sap se grc (ac plugin)Information Disclosure in SAP GRC (AC Plugin)CVE-2025-429828.8 High
- sap se netweaver visual composerDirectory Traversal vulnerability in SAP NetWeaver Visual ComposerCVE-2025-429777.6 High
- sap se netweaver (abap keyword documentation)Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)CVE-2025-313255.8 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence (bi workspace) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)CVE-2025-231928.2 High
- sap se landscape transformation (pcl basis)Missing Authorization Check in SAP Landscape Transformation (PCL Basis)CVE-2025-430117.7 High
- sap se s/4hana cloud private edition or on premise (scm master data layer (mdl))Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))CVE-2025-430108.3 High
- sap se service parts management (spm)Missing Authorization check in SAP Service Parts Management (SPM)CVE-2025-430096.3 Medium
- sap se s/4hana hcm portugal and sap erp hcm portugalMissing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalCVE-2025-430085.8 Medium
- sap se service parts management (spm)Missing Authorization check in SAP Service Parts Management (SPM)CVE-2025-430076.3 Medium
- sap se supplier relationship management (master data management catalog)Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)CVE-2025-430066.1 Medium
- sap se gui for windowsInformation Disclosure vulnerability in SAP GUI for WindowsCVE-2025-430054.3 Medium
- sap se digital manufacturing (production operator dashboard)Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)CVE-2025-430045.3 Medium
- sap se s/4hana (private cloud & on-premise)Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)CVE-2025-430036.4 Medium
- sap se s4/hana (odata meta-data property)Missing Authorization check in SAP S4/HANA (OData meta-data property)CVE-2025-430024.3 Medium
- sap se business objects business intelligence platform (pmw)Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)CVE-2025-430007.9 High
- sap netweaver, sap se netweaver (visual composer development server) +1 moreInsecure Deserialization in SAP NetWeaver (Visual Composer development server)CVE-2025-42999In KEVEPSS 12.9%9.1 Critical
- sap se gateway clientInformation Disclosure vulnerability in SAP Gateway ClientCVE-2025-429976.6 Medium
- sap se netweaver application server abap and abap platformInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2025-313296.2 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300188.6 High
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-3001210.0 Critical
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300115.3 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300106.1 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)CVE-2025-300096.1 Medium
- sap se data services management consoleCross-Site Scripting (XSS) vulnerability in the SAP Data Services Management ConsoleCVE-2025-266624.4 Medium
- sap netweaver, sap se netweaver (visual composer development server) +1 moreMissing Authorization check in SAP NetWeaver (Visual Composer development server)CVE-2025-31324In KEVPublic exploitEPSS 99.5%10.0 Critical
- sap se s/4 hana (learning solution)Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution)CVE-2025-313284.6 Medium
- sap se field logisticsOData meta-data property entity tampering in SAP Field LogisticsCVE-2025-313274.3 Medium
- sap se s4core entityOdata meta-data tampering in SAP S4CORE entityCVE-2025-313334.3 Medium
- sap businessobjects business intelligence platformInsecure File permissions vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2025-313326.6 Medium
- sap se netweaverAuthorization Bypass vulnerability in SAP NetWeaverCVE-2025-313314.3 Medium
- sap se landscape transformation (analysis platform)Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)CVE-2025-313309.9 Critical
- sap se solution managerMissing Authorization check in SAP Solution ManagerCVE-2025-300174.4 Medium
- sap se financial consolidationAuthentication Bypass Vulnerability in SAP Financial ConsolidationCVE-2025-300169.8 Critical
- sap se netweaver and abap platform (application server abap)Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)CVE-2025-300154.1 Medium
- sap se capital yield tax managementDirectory Traversal vulnerability in SAP Capital Yield Tax ManagementCVE-2025-300147.7 High
- sap se erp bw business contentCode Injection vulnerability in SAP ERP BW Business ContentCVE-2025-300136.7 Medium
- sap se netweaver application server abap (virus scan interface)Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface)CVE-2025-274374.3 Medium
- sap se commerce cloudInformation Disclosure Vulnerability in SAP Commerce CloudCVE-2025-274354.2 Medium
- sap se s/4hana (private cloud)Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise)CVE-2025-274299.9 Critical
- Show moreLoading…