Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

SAP SE — Vulnerabilities & Security Advisories 778

Browse all 778 CVE security advisories affecting SAP SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE develops enterprise resource planning software that manages business processes for large organizations globally. With 778 recorded CVEs, its attack surface reflects the complexity of its extensive codebase. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation or insecure default configurations. These flaws allow attackers to bypass authentication, access sensitive data, or execute arbitrary commands on affected systems. Notable incidents include critical flaws in SAP NetWeaver and SAP HANA, which have been actively exploited in the wild. The company maintains a rigorous security response program, issuing regular patches for identified weaknesses. However, the sheer volume of integrations and legacy components continues to present challenges for comprehensive vulnerability management. Organizations deploying SAP solutions must prioritize timely patching and strict access controls to mitigate these persistent risks effectively.

Top products by SAP SE: SAP 3D Visual Enterprise Viewer SAP 3D Visual Enterprise Author SAP Business One SAP Disclosure Management SAP Internet Graphics Server SAP HANA Extended Application Services SAP Business Objects Business Intelligence Platform SAP NetWeaver Enterprise Portal SAP Commerce SAP Enable Now SAP BusinessObjects Business Intelligence platform SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) SAP NetWeaver AS ABAP SAP NetWeaver AS ABAP and ABAP Platform SAP Internet Graphics Service SAP Financial Consolidation SAP Adaptive Server Enterprise SAP Cloud Connector SAP HANA SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) SAP NetWeaver (ABAP Server) and ABAP Platform SAP BusinessObjects Business Intelligence Platform (BI Workspace) SAP S/4HANA SAP Commerce Cloud SAP Host Agent SAP Contact Center SAP NetWeaver (Knowledge Management) SAP NetWeaver AS Java SAP Solution Manager (JAVA stack) SAP Solution Manager
CVE ID Title CVSS Severity Published
CVE-2020-6220 SAP Business Objects Business Intelligence Platform 跨站脚本漏洞 — SAP Business Objects Business Intelligence Platform 6.1 - 2022-06-06
CVE-2022-29617 Contributor License Agreement assistant 安全漏洞 — CLA Assistant CWE-755 6.5 - 2022-06-06
CVE-2022-29616 SAP Host Agent 缓冲区错误漏洞 — SAP NetWeaver and ABAP Platform CWE-787 9.8 - 2022-05-11
CVE-2022-29613 SAP Employee Self Service 输入验证错误漏洞 — SAP Employee Self Service (Fiori My Leave Request) CWE-20 4.3 - 2022-05-11
CVE-2022-29611 SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-862 8.8 - 2022-05-11
CVE-2022-29610 SAP NetWeaver Application Server 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP CWE-79 5.4 - 2022-05-11
CVE-2022-28774 SAP Host Agent 信息泄露漏洞 — SAP Host Agent CWE-863 5.5 - 2022-05-11
CVE-2022-28214 SAP Business Objects 安全漏洞 — SAP BusinessObjects Enterprise (Central Management Server) CWE-312 7.8 - 2022-05-11
CVE-2022-27656 SAP Web Dispatcher 跨站脚本漏洞 — SAP NetWeaver AS for ABAP and Java (ICM Administration UI) CWE-79 6.1 - 2022-05-11
CVE-2022-28215 SAP NetWeaver ABAP Server 输入验证错误漏洞 — SAP NetWeaver ABAP Server and ABAP Platform CWE-601 4.7 - 2022-04-12
CVE-2022-28772 SAP Web Dispatcher 缓冲区错误漏洞 — SAP NetWeaver (Internet Communication Manager) CWE-121 7.5 - 2022-04-12
CVE-2022-27671 SAP Web dispatcher安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-201 6.5 - 2022-04-12
CVE-2022-27669 SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for Java CWE-862 9.8 - 2022-04-12
CVE-2022-28773 SAP Web Dispatcher 和 SAP Internet Communication Manager 资源管理错误漏洞 — SAP NetWeaver (Internet Communication Manager) CWE-674 7.5 - 2022-04-12
CVE-2022-27657 SAP Focused Run 路径遍历漏洞 — SAP Focused Run (Simple Diagnostics Agent) CWE-22 2.7 - 2022-04-12
CVE-2022-28770 SAPUI5 library 跨站脚本漏洞 — SAPUI5 (vbm library) CWE-79 6.1 - 2022-04-12
CVE-2022-28216 SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform (BI Workspace) CWE-79 6.1 - 2022-04-12
CVE-2022-28213 SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-112 8.1 - 2022-04-12
CVE-2022-27654 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-27670 SAP SQL Anywhere 安全漏洞 — SAP SQL Anywhere Server CWE-99 6.5 - 2022-04-12
CVE-2022-22541 SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-213 6.5 - 2022-04-12
CVE-2022-27655 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-26106 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-26105 SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 6.1 - 2022-04-12
CVE-2022-26108 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-26109 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-27667 SAP BusinessObjects Business Intelligence platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-200 7.5 - 2022-04-12
CVE-2022-26107 SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 6.5 - 2022-04-12
CVE-2022-27658 SAP Innovation management 安全漏洞 — SAP Innovation management CWE-862 7.5 - 2022-03-28
CVE-2022-24397 SAP Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 6.1 - 2022-03-09

This page lists every published CVE security advisory associated with SAP SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.