Skip to contentSap Se vulnerabilities
Products
Show 55 moreShow less
Newest
- sap se fiori (launchpad)Path Traversal Vulnerability in SAP Fiori (launchpad)CVE-2026-243154.2 Medium
- sap se gatewayInformation Disclosure vulnerability in SAP GatewayCVE-2026-447494.3 Medium
- sap netweaver application server abapCSS Injection vulnerability in SAP NetWeaver Application Server ABAPCVE-2026-276803.1 Low
- sap se business server pages application (taf applauncher)Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)CVE-2026-401376.1 Medium
- sap se financial consolidationDenial of service (DoS) in SAP Financial ConsolidationCVE-2026-401364.3 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreOS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformCVE-2026-401356.5 Medium
- sap se incentive and commission managementMissing Authorization Check in SAP Incentive and Commission ManagementCVE-2026-401344.3 Medium
- sap se s/4hana condition maintenanceMissing Authorization check in SAP S/4HANA Condition MaintenanceCVE-2026-401336.3 Medium
- sap se strategic enterprise management (bsp application balanced scorecard wizard)Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard)CVE-2026-401325.4 Medium
- sap se hana deployment infrastructure (hdi) deploy librarySQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy libraryCVE-2026-401313.4 Low
- sap se application server abap for sap netweaver and abap platformCode Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP PlatformCVE-2026-401294.3 Medium
- sap se commerce cloud configurationMissing authentication check in SAP Commerce cloud configurationCVE-2026-342639.6 Critical
- sap se s/4hana (sap enterprise search for abap)SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP)CVE-2026-342609.6 Critical
- sap se forecasting & replenishmentOS Command Injection Vulnerability in SAP Forecasting & ReplenishmentCVE-2026-342598.2 High
- sap se sapui5 (search ui)Content Spoofing vulnerability in SAPUI5 (Search UI)CVE-2026-342584.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap (applications based on business server pages) +1 moreReflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)CVE-2026-276824.7 Medium
- sap se businessobjects business intelligence platformCross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence PlatformCVE-2026-05025.4 Medium
- sap human capital management, sap se human capital management for sap s/4hana +1 moreInformation Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANACVE-2026-342646.5 Medium
- sap hana cockpit, hana database explorer, sap se hana cockpit and hana database explorer +2 moreInformation Disclosure Vulnerability in SAP HANA Cockpit and HANA Database ExplorerCVE-2026-342625.0 Medium
- sap se business analytics and sap content managementMissing Authorization check in SAP Business Analytics and SAP Content ManagementCVE-2026-342616.5 Medium
- sap netweaver application server abapOpen Redirect vulnerability in SAP NetWeaver Application Server ABAPCVE-2026-342576.1 Medium
- sap se erp and sap s/4 hana (private cloud and on-premise)Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)CVE-2026-342567.1 High
- sap se businessobjects business intelligence platformReflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2026-276834.1 Medium
- sap se business planning and consolidation and sap business warehouseSQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business WarehouseCVE-2026-276819.9 Critical
- sap manage reference structures, sap se s/4hana frontend odata service (manage reference structures) +1 moreMissing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)CVE-2026-276796.5 Medium
- sap se s/4hana backend odata service (manage reference structures)Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures)CVE-2026-276786.5 Medium
- sap se s/4hana odata service (manage reference equipment)Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)CVE-2026-276776.5 Medium
- sap se s/4hana odata service (manage technical object structures)Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)CVE-2026-276764.3 Medium
- sap se landscape transformationCode Injection vulnerability in SAP Landscape TransformationCVE-2026-276752.0 Low
- sap netweaver application server java, sap se netweaver application server java (web dynpro java) +1 moreCode Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)CVE-2026-276746.1 Medium
- sap se s/4hana (private cloud and on-premise)Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)CVE-2026-276734.9 Medium
- sap se material master applicationMissing Authorization check in Material Master ApplicationCVE-2026-276724.3 Medium
- sap se businessobjects business intelligence platformInsecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2026-243184.2 Medium
- sap se supplier relationship management (sicf handler in srm catalog)Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)CVE-2026-05126.1 Medium
- sap se supply chain managementDenial of service (DOS) in SAP Supply Chain ManagementCVE-2026-276897.7 High
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2026-276885.0 Medium
- sap se s/4hana hcm portugal and sap erp hcm portugalMissing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalCVE-2026-276875.8 Medium
- sap se business warehouse (service api)Missing Authorization check in SAP Business Warehouse (Service API)CVE-2026-276865.9 Medium
- sap se netweaver enterprise portal administrationInsecure Deserialization in SAP NetWeaver Enterprise Portal AdministrationCVE-2026-276859.1 Critical
- sap se netweaver (feedback notification)SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification)CVE-2026-276846.4 Medium
- sap se gui for windows with active guixtDLL Hijacking vulnerability in SAP GUI for Windows with active GuiXTCVE-2026-243175.0 Medium
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreServer-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAPCVE-2026-243166.4 Medium
- sap se solution tools plug-in (st-pi)Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)CVE-2026-243135.0 Medium
- sap se customer checkout 2.0Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0CVE-2026-243115.6 Medium
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2026-243103.5 Low
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAPCVE-2026-243096.4 Medium
- sap se business one (job service)DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)CVE-2026-04896.1 Medium
- sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 moreInformation Disclosure vulnerability in S/4HANA (Manage Payment Media)CVE-2026-243144.3 Medium
- sap business server pages, sap se business server pages application (taf applauncher) +1 moreOpen Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)CVE-2026-243286.1 Medium
- sap strategic enterprise management, sap se strategic enterprise management (balanced scorecard in bsp application) +1 moreMissing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application)CVE-2026-243274.3 Medium
- Show moreLoading…