Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se s/4hana defense & security (disconnected operations), sap s\/4hana defense \& security +1 moreMissing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)CVE-2026-243264.3 Medium
- sap businessobjects enterprise, sap se businessobjects enterprise (central management console) +1 moreCross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console)CVE-2026-243254.8 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (admintools) +1 moreDenial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)CVE-2026-243246.5 Medium
- sap document management system, erp, s4core +2 moreMultiple vulnerabilities in BSP Applications of SAP Document Management SystemCVE-2026-243236.1 Medium
- sap solution tools plug-in, sap se solution tools plug-in (st-pi) +1 moreMissing Authorization check in SAP Solution Tools Plug-In (ST-PI)CVE-2026-243227.7 High
- sap commerce cloudInformation Disclosure vulnerability in SAP Commerce CloudCVE-2026-243215.3 Medium
- sap se netweaver and abap platform (application server abap), sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 moreMemory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)CVE-2026-243203.1 Low
- sap business one, sap se business one (b1 client memory dump files) +1 moreInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)CVE-2026-243195.8 Medium
- sap se business workflow, sap basis +1 moreMissing authorization check in SAP Business WorkflowCVE-2026-243125.2 Medium
- sap supply chain management, advanced planning and optimization +1 moreDenial of service (DOS) in SAP Supply Chain ManagementCVE-2026-236897.7 High
- sap se fiori app (manage service entry sheets - lean services), sap s4core +1 moreMissing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)CVE-2026-236884.3 Medium
- sap se netweaver as abap and abap platform, sap basis +1 moreXML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2026-236878.8 High
- sap netweaver application server javaCRLF Injection vulnerability in SAP NetWeaver Application Server JavaCVE-2026-236863.4 Low
- sap netweaver, sap se netweaver (jms service) +1 moreInsecure Deserialization vulnerability in SAP NetWeaver (JMS service)CVE-2026-236854.4 Medium
- sap commerce cloudRace condition vulnerability in SAP Commerce CloudCVE-2026-236845.9 Medium
- sap se support tools plug-in, sap solution tools plug-in +1 moreMissing Authorization check in a function module in SAP Support Tools Plug-InCVE-2026-236814.3 Medium
- sap se netweaver application server abap and abap platform, sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2026-05099.6 Critical
- sap businessobjects business intelligence platformOpen Redirect vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2026-05087.3 High
- sap document management system, erp, s4core +2 moreMultiple vulnerabilities in BSP Applications of SAP Document Management SystemCVE-2026-05056.1 Medium
- sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 moreDenial of service (DOS) in SAP BusinessObjects BI PlatformCVE-2026-04907.5 High
- sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 moreCode Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)CVE-2026-04889.9 Critical
- sap se abap based sap systems, sap solution tools plug-in +1 moreMissing Authorization Check in ABAP based SAP systemsCVE-2026-04865.0 Medium
- sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 moreDenial of service (DOS) vulnerability in SAP BusinessObjects BI PlatformCVE-2026-04857.5 High
- sap se netweaver application server abap and sap s/4hana, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANACVE-2026-04846.5 Medium
- sap se fiori app (intercompany balance reconciliation)Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-236834.3 Medium
- sap business connectorCross-Site Scripting (XSS) vulnerability in SAP Business ConnectorCVE-2026-05146.1 Medium
- sap supplier relationship management, sap se supplier relationship management (sicf handler in srm catalog) +1 moreOpen Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)CVE-2026-05134.7 Medium
- sap se fiori app (intercompany balance reconciliation)Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-05118.1 High
- sap se nw as java ume user mappingObsolete Encryption Algorithm Used in NW AS Java UME User MappingCVE-2026-05103.0 Low
- sap se application server for abap and sap netweaver rfcsdkOS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDKCVE-2026-05078.4 High
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2026-05068.1 High
- sap se identity managementInsufficient Input Handling in JNDI Operations of SAP Identity ManagementCVE-2026-05043.8 Low
- sap se erp central component and sap s/4hana (sap ehs management)Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)CVE-2026-05036.4 Medium
- sap se s/4hana private cloud and on-premise (financials � general ledger)SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)CVE-2026-05019.9 Critical
- sap introscope enterprise manager, sap se wily introscope enterprise manager (workstation) +1 moreRemote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)CVE-2026-05009.6 Critical
- sap se netweaver enterprise portalCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalCVE-2026-04996.1 Medium
- sap se s/4hana (private cloud and on-premise), sap s\/4 hana +1 moreCode Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)CVE-2026-04989.1 Critical
- sap se business server pages application (product designer web ui)Missing Authorization check in Business Server Pages Application (Product Designer Web UI)CVE-2026-04974.3 Medium
- sap se fiori app (intercompany balance reconciliation)Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-04966.6 Medium
- sap se fiori app (intercompany balance reconciliation)Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-04955.1 Medium
- sap se fiori app (intercompany balance reconciliation)Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-04944.3 Medium
- sap se fiori app (intercompany balance reconciliation)Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)CVE-2026-04934.3 Medium
- sap hana databasePrivilege escalation vulnerability in SAP HANA databaseCVE-2026-04928.8 High
- sap se landscape transformationCode Injection vulnerability in SAP Landscape TransformationCVE-2026-04919.1 Critical
- sap se jconnect - sdk for aseDeserialization Vulnerability in SAP jConnect - SDK for ASECVE-2025-429289.1 Critical
- sap se application server abapInformation Disclosure vulnerability in Application Server ABAPCVE-2025-429046.5 Medium
- sap se businessobjects business intelligence platformServer-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence PlatformCVE-2025-428965.4 Medium
- sap se enterprise search for abapMissing Authorization check in SAP Enterprise Search for ABAPCVE-2025-428915.5 Medium
- sap se solution managerCode Injection vulnerability in SAP Solution ManagerCVE-2025-428809.9 Critical
- sap se web dispatcher and internet communication manager (icm)Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)CVE-2025-428788.2 High
- Show moreLoading…