Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se web dispatcher, internet communication manager and sap content serverMemory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerCVE-2025-428777.5 High
- sap se s/4 hana private cloud (financials general ledger)Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)CVE-2025-428767.1 High
- sap se netweaver internet communication frameworkMissing Authentication check in SAP NetWeaver Internet Communication FrameworkCVE-2025-428756.6 Medium
- sap se netweaver (remote service for xcelsius)Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)CVE-2025-428747.9 High
- sap se sapui5 framework (markdown-it component)Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)CVE-2025-428735.9 Medium
- sap se netweaver enterprise portalCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalCVE-2025-428726.1 Medium
- sap se commoncryptolibMemory Corruption vulnerability in SAP CommonCryptoLibCVE-2025-429407.5 High
- sap se s/4hana landscape (sap e-recruiting bsp)Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)CVE-2025-429246.1 Medium
- sap se netweaver application server javaInformation Disclosure vulnerability in SAP NetWeaver Application Server JavaCVE-2025-429195.3 Medium
- sap se s4core (manage journal entries)Missing Authorization check in SAP S4CORE (Manage Journal Entries)CVE-2025-428994.3 Medium
- sap se business one (sld)Information Disclosure vulnerability in SAP Business One (SLD)CVE-2025-428975.3 Medium
- sap se hana jdbc clientCode Injection vulnerability in SAP HANA JDBC ClientCVE-2025-428956.9 Medium
- sap business connectorPath Traversal vulnerability in SAP Business ConnectorCVE-2025-428946.8 Medium
- sap business connectorOpen Redirect vulnerability in SAP Business ConnectorCVE-2025-428936.1 Medium
- sap business connectorOS Command Injection vulnerability in SAP Business ConnectorCVE-2025-428926.8 Medium
- sap se sql anywhere monitor (non-gui)Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)CVE-2025-4289010.0 Critical
- sap se starter solution (pl saft)SQL Injection vulnerability in SAP Starter Solution (PL SAFT)CVE-2025-428895.4 Medium
- sap se gui for windowsInformation Disclosure vulnerability in SAP GUI for WindowsCVE-2025-428885.5 Medium
- sap se solution managerCode Injection vulnerability in SAP Solution ManagerCVE-2025-428879.9 Critical
- sap business connectorReflected Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2025-428866.1 Medium
- sap se hana 2.0 (hdbrss)Missing authentication in SAP HANA 2.0 (hdbrss)CVE-2025-428855.8 Medium
- sap se netweaver enterprise portalJNDI Injection vulnerability in SAP NetWeaver Enterprise PortalCVE-2025-428846.5 Medium
- sap se netweaver application server for abap (migration workbench)Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)CVE-2025-428832.7 Low
- sap se netweaver application server for abapMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2025-428824.3 Medium
- sap se s/4hana (manage processing rules - for bank statements)Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements)CVE-2025-429394.3 Medium
- sap se print serviceDirectory Traversal vulnerability in SAP Print ServiceCVE-2025-429379.8 Critical
- sap se supplier relationship managementUnrestricted File Upload Vulnerability in SAP Supplier Relationship ManagementCVE-2025-429109.0 Critical
- sap se cloud appliance library appliancesSecurity Misconfiguration vulnerability in SAP Cloud Appliance Library AppliancesCVE-2025-429093.0 Low
- sap se netweaver application server for abapCross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAPCVE-2025-429085.4 Medium
- sap se commerce cloudDirectory Traversal vulnerability in SAP Commerce CloudCVE-2025-429065.3 Medium
- sap se financial service claims managementUser Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims ManagementCVE-2025-429034.3 Medium
- sap se netweaver as abap and abap platformMemory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP PlatformCVE-2025-429025.3 Medium
- sap se application server for abap (bapi browser)Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser)CVE-2025-429015.4 Medium
- sap se bi platformServer-Side Request Forgery in SAP BI PlatformCVE-2025-429074.3 Medium
- sap se netweaverMissing Authentication check in SAP NetWeaverCVE-2025-429589.1 Critical
- sap se netweaver (rmi-p4)Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4)CVE-2025-42944Public exploit10.0 Critical
- sap se netweaver abap platformCross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP PlatformCVE-2025-429386.1 Medium
- sap se business one (sld)Insecure Storage of Sensitive Information in SAP Business One (SLD)CVE-2025-429338.8 High
- sap se business planning and consolidationDenial of Service (DoS) vulnerability in SAP Business Planning and ConsolidationCVE-2025-429306.5 Medium
- sap se landscape transformation replication serverMissing input validation vulnerability in SAP Landscape Transformation Replication ServerCVE-2025-429298.1 High
- sap se netweaver as java (adobe document service)Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)CVE-2025-429273.4 Low
- sap netweaver application server javaMissing Authentication check in SAP NetWeaver Application Server JavaCVE-2025-429265.3 Medium
- sap se netweaver as java (iiop service)Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)CVE-2025-429254.3 Medium
- sap se fiori app (f4044 manage work center groups)Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)CVE-2025-429234.3 Medium
- sap se netweaver as java (deploy web service)Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)CVE-2025-429229.9 Critical
- sap supplier relationship managementCross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship ManagementCVE-2025-429206.1 Medium
- sap se netweaver application server for abap (background processing), sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing)CVE-2025-429184.3 Medium
- sap se hcm (approve timesheets fiori 2.0 application)Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)CVE-2025-429176.5 Medium
- sap se s/4hana (private cloud or on-premise)Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)CVE-2025-429168.1 High
- sap se fiori app (manage payment blocks)Missing Authorization Check in Fiori app (Manage Payment Blocks)CVE-2025-429155.4 Medium
- Show moreLoading…