Sap - vulnerabilities (CVEs)
1605 CVEs in 574 products, 0 in the last 30 days, newest from 2026-08-11.
Products
- 3d Visual Enterprise Viewer - 131 CVEs
- Netweaver - 106 CVEs
- Netweaver Application Server Abap - 86 CVEs
- Businessobjects Business Intelligence Platform - 73 CVEs
- Netweaver Application Server Java - 70 CVEs
- Businessobjects Business Intelligence - 45 CVEs
- Hana - 37 CVEs
- Solution Manager - 33 CVEs
- Business One - 31 CVEs
- Internet Graphics Server - 28 CVEs
- 3d Visual Enterprise Author - 27 CVEs
- Businessobjects - 23 CVEs
- Netweaver Abap - 21 CVEs
- Netweaver Process Integration - 21 CVEs
- Business Objects Business Intelligence Platform - 20 CVEs
- Commerce Cloud - 20 CVEs
- Netweaver Enterprise Portal - 20 CVEs
- Hana Extended Application Services - 18 CVEs
- S/4hana - 18 CVEs
- Sap Basis - 18 CVEs
- Disclosure Management - 16 CVEs
- Host Agent - 15 CVEs
- Adaptive Server Enterprise - 14 CVEs
- Enable Now - 14 CVEs
- Approuter - 13 CVEs
- S4core - 13 CVEs
- Abap Platform - 12 CVEs
- Customer Relationship Management Webclient Ui - 12 CVEs
- Netweaver As Abap - 12 CVEs
- Sap Db - 12 CVEs
- Web Dispatcher - 12 CVEs
- Sap Web Application Server - 11 CVEs
- Supplier Relationship Management - 11 CVEs
- Commerce - 10 CVEs
- Customer Relationship Management - 10 CVEs
- Netweaver As Abap Business Server Pages - 10 CVEs
- Internet Transaction Server - 9 CVEs
- Netweaver Application Server For Java - 9 CVEs
- Sap Kernel - 9 CVEs
- Cloud Connector - 8 CVEs
- Hana Database - 8 CVEs
- Hybris - 8 CVEs
- Landscape Management - 8 CVEs
- Maxdb - 8 CVEs
- Mobile Platform - 8 CVEs
- Rfc Library - 8 CVEs
- Sql Anywhere - 8 CVEs
- Trex - 8 CVEs
- Afaria - 7 CVEs
- Basis - 7 CVEs
- Business Connector - 7 CVEs
- Business Warehouse - 7 CVEs
- Crystal Reports - 7 CVEs
- Erp - 7 CVEs
- Financial Consolidation - 7 CVEs
- Netweaver As For Abap And Abap Platform - 7 CVEs
- Netweaver As Internet Graphics Server - 7 CVEs
- S/4 Hana - 7 CVEs
- Sapscore - 7 CVEs
- Business Application Software Integrated Solution - 6 CVEs
- Business Planning And Consolidation - 6 CVEs
- Businessobjects Edge - 6 CVEs
- Content Server - 6 CVEs
- Customer Relationship Management S4fnd - 6 CVEs
- Fiori Client - 6 CVEs
- Netweaver Knowledge Management - 6 CVEs
- Sapgui - 6 CVEs
- Advanced Business Application Programming Platform Kernel - 5 CVEs
- Businessobjects Web Intelligence - 5 CVEs
- Bw/4hana - 5 CVEs
- Crystal Reports Server - 5 CVEs
- Gui For Windows - 5 CVEs
- Netweaver Abap Application Server - 5 CVEs
- Netweaver As Abap Krnl64uc - 5 CVEs
- Netweaver Java Application Server - 5 CVEs
- Powerdesigner - 5 CVEs
- S4fnd - 5 CVEs
- Sap Businessobjects Business Intelligence Platform - 5 CVEs
- Sap Fiori Client - 5 CVEs
- Sap R 3 - 5 CVEs
- Advanced Business Application Programming Platform Krnl64nuc - 4 CVEs
- Advanced Business Application Programming Platform Krnl64uc - 4 CVEs
- Application Interface Framework - 4 CVEs
- Business Client - 4 CVEs
- Businessobjects Bi Platform - 4 CVEs
- Commerce Hycom - 4 CVEs
- Commoncryptolib - 4 CVEs
- Contact Center - 4 CVEs
- Diagnostics Agent - 4 CVEs
- Enjoysap - 4 CVEs
- Enterprise Portal - 4 CVEs
- Fiori - 4 CVEs
- Fiori Launchpad - 4 CVEs
- Focused Run - 4 CVEs
- Identity Management - 4 CVEs
- J2ee Engine - 4 CVEs
- Netweaver As Abap Kernel - 4 CVEs
- Netweaver As Abap Krnl64nuc - 4 CVEs
- Netweaver Development Infrastructure - 4 CVEs
- Saplpd - 4 CVEs
- Ui - 4 CVEs
- Advanced Business Application Programming Platform Krnl32nuc - 3 CVEs
- Advanced Business Application Programming Platform Krnl32uc - 3 CVEs
- Bank Account Management - 3 CVEs
- Businessobjects Business Intelligence Platform Web Services - 3 CVEs
- Businessobjects Financial Consolidation - 3 CVEs
- Enterprise Financial Services - 3 CVEs
- Erp Central Component - 3 CVEs
- Graphical User Interface - 3 CVEs
- Gui - 3 CVEs
- Hana Db - 3 CVEs
- Manufacturing Execution - 3 CVEs
- Manufacturing Integration And Intelligence - 3 CVEs
- Netweaver Application Server For Abap And Abap Platform - 3 CVEs
- Netweaver As Abap Bsp Framework - 3 CVEs
- Netweaver As For Java - 3 CVEs
- Netweaver Portal - 3 CVEs
- Netweaver Rfc Sdk - 3 CVEs
- Network Interface Router - 3 CVEs
- Plant Connectivity - 3 CVEs
- Sap Businessobjects Business Intelligence - 3 CVEs
- Sap Hana Extended Application Services - 3 CVEs
- Sap Internet Graphics Server Igs - 3 CVEs
- Sapcar - 3 CVEs
- Sapsprint - 3 CVEs
- Solution Tools Plug-in - 3 CVEs
- Treasury And Risk Management (s4core) - 3 CVEs
- Ui5 - 3 CVEs
- Abap Platform Kernel - 2 CVEs
- Access Control - 2 CVEs
- Application Interface Framework Message Dashboard - 2 CVEs
- Authenticator - 2 CVEs
- Banking Services - 2 CVEs
- Banking Services From Sap - 2 CVEs
- Biller Direct - 2 CVEs
- Business-one-hana-chef-cookbook - 2 CVEs
- Business Intelligence Development Workbench - 2 CVEs
- Business Intelligence Promotion Management Application - 2 CVEs
- Business Warehouse Virtual Comp - 2 CVEs
- Businessobjects Explorer - 2 CVEs
- Businessobjects Mobile - 2 CVEs
- Businessobjects Xi - 2 CVEs
- Commerce Backoffice - 2 CVEs
- Commerce Cloud (accelerator Payment Mock) - 2 CVEs
- Contributor License Agreement Assistant - 2 CVEs
- Crm - Webclient Ui - 2 CVEs
- Crm Webclient Ui - 2 CVEs
- Customer Data Cloud - 2 CVEs
- Data Services - 2 CVEs
- Document Builder - 2 CVEs
- Document Management System - 2 CVEs
- Download Manager - 2 CVEs
- E-commerce - 2 CVEs
- Ea-finserv - 2 CVEs
- Emr Unwired - 2 CVEs
- Enable Now Manager - 2 CVEs
- Enterprise Extension Financial Services - 2 CVEs
- Enterprise Threat Detection - 2 CVEs
- Environment Health And Safety - 2 CVEs
- Erp Financial Accounting - 2 CVEs
- Erp Human Capital Management - 2 CVEs
- Extended Application Services And Runtime - 2 CVEs
- Fiori Launchpad (news Tile Application) - 2 CVEs
- Gateway - 2 CVEs
- Hana Web-based Development Workbench - 2 CVEs
- Hana Xs - 2 CVEs
- Human Capital Management - 2 CVEs
- Infrabox - 2 CVEs
- Internet Communication Manager - 2 CVEs
- Introscope Enterprise Manager - 2 CVEs
- Java As - 2 CVEs
- Marketing - 2 CVEs
- Master Data Governance - 2 CVEs
- Mobile Secure - 2 CVEs
- Netweaver Business Client - 2 CVEs
- Netweaver Business Client For Html - 2 CVEs
- Netweaver Business Warehouse - 2 CVEs
- Netweaver Guided Procedures - 2 CVEs
- Netweaver Knowledge Management And Collaboration (kmc-cm) - 2 CVEs
- Netweaver Master Data Management - 2 CVEs
- Netweaver System Landscape Directory - 2 CVEs
- Point Of Sale Xpress Server - 2 CVEs
- Powerdesigner Proxy - 2 CVEs
- Process Integration - 2 CVEs
- Router - 2 CVEs
- S/4hana Financial Products Subledger - 2 CVEs
- Sap Aba - 2 CVEs
- Sap Adaptive Server Enterprise Ase - 2 CVEs
- Sap Basis Component 640 - 2 CVEs
- Sap Basis Component 700 - 2 CVEs
- Sap Businessobjects Business Intelligence Suite - 2 CVEs
- Sap Enterprise Financial Services - 2 CVEs
- Sap Gui - 2 CVEs
- Sap Hana - 2 CVEs
- Sap Iq - 2 CVEs
- Sap Netweaver As Java Servercore - 2 CVEs
- Sapcryptolib - 2 CVEs
- Sapssoext - 2 CVEs
- Shared Service Framework - 2 CVEs
- Simple Diagnostics Agent - 2 CVEs
- Solution Manager Bsp Application - 2 CVEs
- Student Life Cycle Management - 2 CVEs
- Successfactors Mobile - 2 CVEs
- Supplier Relationship Management Mdm Catalog - 2 CVEs
- Work Manager - 2 CVEs
- @sap/xssec - 1 CVEs
- Abap Platform And Sap Web Dispatcher - 1 CVEs
- Abapplatform - 1 CVEs
- Adaptive Extensions - 1 CVEs
- Adaptive Server Enterprise Backup Server - 1 CVEs
- Adaptive Server Enterprise Cockpit - 1 CVEs
- Adminadapter - 1 CVEs
- Advanced Business Application Programming - 1 CVEs
- Advanced Business Application Programming Platform - 1 CVEs
- Advanced Business Application Programming Server - 1 CVEs
- Advanced Planning And Optimization - 1 CVEs
- Agentry Sdk - 1 CVEs
- Analysis For Microsoft Office - 1 CVEs
- Application Interface - 1 CVEs
- Application Interface Framework Message Monitoring - 1 CVEs
- Application Interface Framework Odata Service - 1 CVEs
- Application Server - 1 CVEs
- Application Server Java - 1 CVEs
- Ase Database Platform - 1 CVEs
- Asset Accounting - 1 CVEs
- Authenticator For Android - 1 CVEs
- Background Processing - 1 CVEs
- Bank/cfm - 1 CVEs
- Bank Account Management Manage Banks - 1 CVEs
- Bank Analyzer - 1 CVEs
- Basis Communication Services - 1 CVEs
- Bex Web Java Runtime Export Web Service - 1 CVEs
- Bi Launchpad - 1 CVEs
- Bi Universal Data Integration - 1 CVEs
- Brazil - 1 CVEs
- Business Intelligence Platform - 1 CVEs
- Business Object Processing Framework For Abap - 1 CVEs
- Business Objects - 1 CVEs
- Business Objects Adaptive Job Server - 1 CVEs
- Business Objects Business Intelligence Platform Cmc - 1 CVEs
- Business Objects Business Intelligence Platform Web Intelligence - 1 CVEs
- Business One 2005-a - 1 CVEs
- Business One Client - 1 CVEs
- Business One License Service Api - 1 CVEs
- Business One On Hana - 1 CVEs
- Business Server Pages - 1 CVEs
- Business Warehouse Universal Data Integration - 1 CVEs
- Business Workflow - 1 CVEs
- Businessobjects Analysis - 1 CVEs
- Businessobjects Business Intelligence Platform Analysis Edition For Olap - 1 CVEs
- Businessobjects Business Intelligence Platform Central Management Console - 1 CVEs
- Businessobjects Business Intelligence Platform Cmc - 1 CVEs
- Businessobjects Business Intelligence Platform Promotion Management - 1 CVEs
- Businessobjects Bw Publisher Service - 1 CVEs
- Businessobjects Enterprise - 1 CVEs
- Capacity Leveling - 1 CVEs
- Ccms / Database Monitor - 1 CVEs
- Ccms Agent - 1 CVEs
- Chef Business-one-cookbook - 1 CVEs
- Cla-assistant - 1 CVEs
- Clinical Task Tracker - 1 CVEs
- Cloud-sdk-js - 1 CVEs
- Cloud-security-client-go - 1 CVEs
- Cloud-security-services-integration-library - 1 CVEs
- Cloud Platform - 1 CVEs
- Cloud Platform Integration - 1 CVEs
- Cloud Sdk - 1 CVEs
- Cm Services - 1 CVEs
- Cms Services - 1 CVEs
- Commerce Data Hub - 1 CVEs
- Commerce Webservices 2.0 - 1 CVEs
- Commerce Webservices 2.0 Swagger Ui - 1 CVEs
- Companion - 1 CVEs
- Computing Center Management System Monitoring - 1 CVEs
- Contract Accounting - 1 CVEs
- Contract Lifecycle Manager - 1 CVEs
- Crm - 1 CVEs
- Crm Abap Insights Management - 1 CVEs
- Crystal Reports For Visual Studio - 1 CVEs
- Customer Relationship Management Abap - 1 CVEs
- Customer Relationship Management Bbpcrm - 1 CVEs
- Customer Relationship Management Internet Sales - 1 CVEs
- Customer Relationship Management S4crm - 1 CVEs
- Data Intelligence - 1 CVEs
- Diagnostics Agent Eventlogservicecollector - 1 CVEs
- Diagnostics Agent Oscommand Bridge - 1 CVEs
- Digital Manufacturing - 1 CVEs
- Dmis - 1 CVEs
- Document Management Services - 1 CVEs
- Dynamic Authorization Management - 1 CVEs
- Dynamic Tier - 1 CVEs
- E-recruiting - 1 CVEs
- Emarsys Sdk - 1 CVEs
- Employee Self Service - 1 CVEs
- Enable Now Enable Now Consump Del - 1 CVEs
- Enable Now Wpb Manager - 1 CVEs
- Enable Now Wpb Manager Ce - 1 CVEs
- Enable Now Wpb Manager Hana - 1 CVEs
- Enhancement Package - 1 CVEs
- Enterprise Central Component - 1 CVEs
- Enterprise Extension Defense Forces & Public Security - 1 CVEs
- Enterprise Performance Management - 1 CVEs
- Enterprise Resource Planning - 1 CVEs
- Epbc - 1 CVEs
- Epbc2 - 1 CVEs
- Erp (ea-finserv) - 1 CVEs
- Erp (s4core) - 1 CVEs
- Erp Client For E-bilanz - 1 CVEs
- Erp Defense Forces And Public Security - 1 CVEs
- Erp Financials Information System - 1 CVEs
- Erp Hcm - 1 CVEs
- Erp Localization For Cee Countries - 1 CVEs
- Erp Sales - 1 CVEs
- Fi Manager Self-service - 1 CVEs
- Financial Consolidation Cube Designer - 1 CVEs
- Financial Consolidation Cube Designer Bobj Eades - 1 CVEs
- Fiori Apps 1.0 For Travel Management In Sap Erp My Travel Requests - 1 CVEs
- Fiori Apps 2.0 For Travel Management In Sap Erp - 1 CVEs
- Fiori Front End Server - 1 CVEs
- Gbx01 Hr - 1 CVEs
- Generic Market Data - 1 CVEs
- Global Label Management - 1 CVEs
- Governance Risk And Compliance - 1 CVEs
- Grc Process Control - 1 CVEs
- Gui Connector - 1 CVEs
- Guided Procedures Archive Monitor - 1 CVEs
- Hana-client - 1 CVEs
- Hana Cockpit - 1 CVEs
- Hana Database Explorer - 1 CVEs
- Hana Sps09 - 1 CVEs
- Hcm Fiori App My Forms - 1 CVEs
- Hcm Fiori App My Forms Fiori 2.0 - 1 CVEs
- Hcm Travel Management - 1 CVEs
- Healthcare Industry Solution - 1 CVEs
- Host Agent Saposcol - 1 CVEs
- Host Agent Service - 1 CVEs
- Host Agent Windows - 1 CVEs
- Ides Ecc - 1 CVEs
- Information Steward - 1 CVEs
- Infrastructure - 1 CVEs
- Innovation Management - 1 CVEs
- Inventory Manager - 1 CVEs
- J2ee Engine Core - 1 CVEs
- J2ee Engine Server Core - 1 CVEs
- Kmc-bc - 1 CVEs
- Knowledge Management Xmlforms In Sap Netweaver - 1 CVEs
- Knowledge Warehouse - 1 CVEs
- Landscape Transformation - 1 CVEs
- Landscape Transformation Replication Server - 1 CVEs
- Leasing - 1 CVEs
- Less-openui5 - 1 CVEs
- Lt Replication Server - 1 CVEs
- Lumira Server - 1 CVEs
- Manage Reference Structures - 1 CVEs
- Marketing Sapscore - 1 CVEs
- Marketing Uicuan - 1 CVEs
- Master Data Governance (s4core) - 1 CVEs
- Master Data Governance (s4fnd) - 1 CVEs
- Master Data Governance (sap Bs Fnd) - 1 CVEs
- Master Data Governance For Material Data - 1 CVEs
- Master Data Synchronization - 1 CVEs
- Maxdb Odbc Driver - 1 CVEs
- Message Server - 1 CVEs
- Mobile Infrastructure - 1 CVEs
- Mobile Platform Sdk - 1 CVEs
- Mobile Sdk Certificate Provider - 1 CVEs
- Mysap Business Suite - 1 CVEs
- Netweaver Abap Server And Abap Platform - 1 CVEs
- Netweaver Application Server - 1 CVEs
- Netweaver Application Server Abap Kernel - 1 CVEs
- Netweaver Application Server Abap Krnl64nuc - 1 CVEs
- Netweaver Application Server Abap Krnl64uc - 1 CVEs
- Netweaver As Abap And Abap Platform - 1 CVEs
- Netweaver As Abap Business Server Pages Application - 1 CVEs
- Netweaver As For Abap And Abap Platform Saprsbro Program - 1 CVEs
- Netweaver As For Abap Business Server Pages - 1 CVEs
- Netweaver As For Java Http Provider Service - 1 CVEs
- Netweaver As Java For Classload Service - 1 CVEs
- Netweaver As Java For Deploy Service - 1 CVEs
- Netweaver As Java Object Analyzing Service - 1 CVEs
- Netweaver Bi Cont Addon - 1 CVEs
- Netweaver Bi Content - 1 CVEs
- Netweaver Compare Systems - 1 CVEs
- Netweaver Composite Application Framework - 1 CVEs
- Netweaver Design Time Repository - 1 CVEs
- Netweaver Developer Studio - 1 CVEs
- Netweaver Exchange Infrastructure (bc-xi) - 1 CVEs
- Netweaver Internet Communication Manager (kernel) - 1 CVEs
- Netweaver Internet Communication Manager (krnl32nuc) - 1 CVEs
- Netweaver Internet Communication Manager (krnl32uc) - 1 CVEs
- Netweaver Internet Communication Manager (krnl64nuc) - 1 CVEs
- Netweaver Internet Communication Manager (krnl64uc) - 1 CVEs
- Netweaver Internet Transaction Server - 1 CVEs
- Netweaver J2ee Engine - 1 CVEs
- Netweaver Java - 1 CVEs
- Netweaver Java Web Application - 1 CVEs
- Netweaver Java Web Container And Http Service Engine - 1 CVEs
- Netweaver Knowledge Management And Collaboration (kmc-wpc) - 1 CVEs
- Netweaver Knowledge Management Configuration Service - 1 CVEs
- Netweaver Knowledge Management Xml Forms - 1 CVEs
- Netweaver Logviewer - 1 CVEs
- Netweaver Master Data Management Server - 1 CVEs
- Netweaver Nw04 - 1 CVEs
- Netweaver Nw04s - 1 CVEs
- Netweaver Sap Enterprise Portal - 1 CVEs
- Netweaver Software Lifecycle Manager - 1 CVEs
- Netweaver Solution Manager - 1 CVEs
- Oil %/ Gas - 1 CVEs
- Oil Industry Solution Traders And Schedulers Workbench - 1 CVEs
- Open Hub Service - 1 CVEs
- Openui5 - 1 CVEs
- Orientdb - 1 CVEs
- Payment Engine - 1 CVEs
- Payroll Process - 1 CVEs
- People Profile - 1 CVEs
- Permit To Work - 1 CVEs
- Portfolio And Project Management - 1 CVEs
- Print And Output Management - 1 CVEs
- Privileges - 1 CVEs
- Process Integration (pgp Module - Business-to-business Add On) - 1 CVEs
- Process Monitoring Infrastructure - 1 CVEs
- Production Planning And Control - 1 CVEs
- Profile Maintenance - 1 CVEs
- Project Gardener - 1 CVEs
- Project System - 1 CVEs
- Quality Management - 1 CVEs
- R/3 Enterprise - 1 CVEs
- R/3 Enterprise Retail - 1 CVEs
- S4 Hana Map Treasury Correspondence Format Data - 1 CVEs
- S4coreop - 1 CVEs
- S4hana - 1 CVEs
- S4hana Sales - 1 CVEs
- S/4 Hana Fiori Ui For General Ledger Accounting - 1 CVEs
- S/4hana Defense & Security - 1 CVEs
- S/4hana Finance - 1 CVEs
- S/4hana For Financial Products Subledger - 1 CVEs
- S/4hana Uiapfi70 - 1 CVEs
- S/4hana Uis4h - 1 CVEs
- Saf-t Framework - 1 CVEs
- Sap-xssec - 1 CVEs
- Sap Adaptive Server Enterprise - 1 CVEs
- Sap As Abap(dmis) - 1 CVEs
- Sap Basis Abap Platform - 1 CVEs
- Sap Basis As Abap Of Sap Netweaver - 1 CVEs
- Sap Basis Trex Bwa Installation - 1 CVEs
- Sap Bpc Ms 10.0 - 1 CVEs
- Sap Business Intelligence Promotion Management Application - 1 CVEs
- Sap Business Intelligence Promotion Management Application. - 1 CVEs
- Sap Business Objects Platform - 1 CVEs
- Sap Business Objects Platform Monitoring Db - 1 CVEs
- Sap Business One - 1 CVEs
- Sap Business One Android Application - 1 CVEs
- Sap Business One Service Layer B1 On Hana - 1 CVEs
- Sap Business Warehouse Universal Data Integration - 1 CVEs
- Sap Businessobjects Bi Platform Servers Software Development Kit - 1 CVEs
- Sap Businessobjects Business Intelligence Bi Launchpad And Central Management Console - 1 CVEs
- Sap Businessobjects Business Intelligence Platform Biworkspace - 1 CVEs
- Sap Businessobjects Business Intelligence Platform Server - 1 CVEs
- Sap Businessobjects Financial Consolidation - 1 CVEs
- Sap Change And Transport System Abap - 1 CVEs
- Sap Commerce Sap Hybris Commerce - 1 CVEs
- Sap Crystal Reports - 1 CVEs
- Sap Data Services - 1 CVEs
- Sap Disclosure Management - 1 CVEs
- Sap Dynamic Authorization Management Dam By Nextlabs Java Policy Controller Versions - 1 CVEs
- Sap Fiori 1.0 For Sap Erp Hcm Approve Leave Request - 1 CVEs
- Sap Gateway - 1 CVEs
- Sap Hybris Commerce - 1 CVEs
- Sap Identity Management - 1 CVEs
- Sap Kernel Krnl32nuc - 1 CVEs
- Sap Kernel Krnl32uc - 1 CVEs
- Sap Kernel Krnl64nuc - 1 CVEs
- Sap Kernel Krnl64uc - 1 CVEs
- Sap Marketing Sapscore - 1 CVEs
- Sap Marketing Uicuan - 1 CVEs
- Sap Maxdb Livecache - 1 CVEs
- Sap Message Server - 1 CVEs
- Sap Mobile Platform - 1 CVEs
- Sap Mobile Secure Android Application - 1 CVEs
- Sap Mobile Secure For Android - 1 CVEs
- Sap Netweaver - 1 CVEs
- Sap Netweaver Application Server For Abap - 1 CVEs
- Sap Netweaver Application Server Java - 1 CVEs
- Sap Netweaver Application Server Java Library - 1 CVEs
- Sap Netweaver As Java - 1 CVEs
- Sap Netweaver Bi - 1 CVEs
- Sap Netweaver Enterprise Portal - 1 CVEs
- Sap Netweaver Forums - 1 CVEs
- Sap Netweaver Internet Transaction Server Its - 1 CVEs
- Sap Netweaver Knowledge Management Configuration Service - 1 CVEs
- Sap Netweaver Ui Infra - 1 CVEs
- Sap Note Assistant - 1 CVEs
- Sap Plant Connectivity - 1 CVEs
- Sap R3 Enterprise Retail - 1 CVEs
- Sap R 3 Web Application Server Demo - 1 CVEs
- Sap S4 Hana(dmis) - 1 CVEs
- Sap Solution Manager System - 1 CVEs
- Sap Srm-mdm Catalog - 1 CVEs
- Sap Startup Service - 1 CVEs
- Sap Supplier Relationship Management Master Data Management Catalog - 1 CVEs
Newest CVEs of Sap
- CVE-2026-66778 - CVSS 5.3 (medium), 2026-08-11: SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send…
- CVE-2026-66777 - CVSS 5.9 (medium), 2026-08-11: SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required…
- CVE-2026-66776 - CVSS 5.9 (medium), 2026-08-11: SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low…
- CVE-2026-66775 - CVSS 4.3 (medium), 2026-08-11: SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a…
- CVE-2026-66774 - CVSS 3.7 (low), 2026-08-11: SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration.…
- CVE-2026-66761 - CVSS 4.3 (medium), 2026-08-11: SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without…
- CVE-2026-66760 - CVSS 6.4 (medium), 2026-08-11: SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same…
- CVE-2026-58239 - CVSS 3.7 (low), 2026-08-11: SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof…
- CVE-2026-58238 - CVSS 5.9 (medium), 2026-08-11: SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that…
- CVE-2026-58237 - CVSS 5.9 (medium), 2026-08-11: WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to…
- CVE-2026-58230 - CVSS 7 (high), 2026-08-11: SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted…
- CVE-2026-44745 - CVSS 8.1 (high), 2026-07-14: SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated…
- CVE-2026-27690 - CVSS 9.1 (critical), 2026-07-14: Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to…
- CVE-2026-27680 - CVSS 4.3 (medium), 2026-05-14: Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets…
- CVE-2026-40135 - CVSS 6.5 (medium), 2026-05-12: An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with…
- CVE-2026-27682 - CVSS 6.1 (medium), 2026-05-12: Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an…
- CVE-2026-34264 - CVSS 6.5 (medium), 2026-04-14: During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low…
- CVE-2026-34262 - CVSS 5 (medium), 2026-04-14: Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
- CVE-2026-34257 - CVSS 6.1 (medium), 2026-04-14: Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a…
- CVE-2026-27679 - CVSS 6.5 (medium), 2026-04-14: Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child…
- CVE-2026-27674 - CVSS 6.1 (medium), 2026-04-14: Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that…
- CVE-2026-27688 - CVSS 5 (medium), 2026-03-10: Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer…
- CVE-2026-24316 - CVSS 6.4 (medium), 2026-03-10: SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external…
- CVE-2026-24310 - CVSS 4.3 (medium), 2026-03-10: Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and…
- CVE-2026-24309 - CVSS 6.4 (medium), 2026-03-10: Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to…
- CVE-2026-24314 - CVSS 4.3 (medium), 2026-02-24: Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This…
- CVE-2026-24328 - CVSS 6.1 (medium), 2026-02-10: SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to…
- CVE-2026-24327 - CVSS 4.3 (medium), 2026-02-10: Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could…
- CVE-2026-24321 - CVSS 5.3 (medium), 2026-02-10: SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive…
- CVE-2026-24322 - CVSS 7.7 (high), 2026-02-10: SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing…
