SAP SE 厂商相关 778 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,核心产品涵盖 ERP、CRM 及数据分析平台。其系统历史漏洞多集中于远程代码执行、SQL 注入及身份验证绕过,常因配置不当或组件缺陷引发数据泄露。近期安全事件多涉及未授权访问与权限提升,凸显复杂集成环境下的风险。企业需强化补丁管理与访问控制,以应对持续演进的威胁态势,保障业务连续性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-0319 | SAP Gateway 注入漏洞 — SAP Gateway | - | - | 2019-07-10 |
| CVE-2019-0318 | SAP Netweaver Application Server Java 信息泄露漏洞 — SAP NetWeaver Application Server for Java (Startup Framework) | 7.5 | - | 2019-07-10 |
| CVE-2019-0281 | SAP SAPUI5和OpenUI5 跨站脚本漏洞 — OpenUI5 | 6.1 | - | 2019-07-10 |
| CVE-2019-0316 | SAP NetWeaver Process Integration 跨站脚本漏洞 — SAP NetWeaver Process Integration(SAP_XIESR) | 4.8 | - | 2019-06-14 |
| CVE-2019-0303 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform (Administration Console) | 6.4 | - | 2019-06-14 |
| CVE-2019-0311 | SAP R/3 Enterprise Application 跨站脚本漏洞 — SAP R/3 Enterprise Application | 5.4 | - | 2019-06-12 |
| CVE-2019-0312 | SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration(SAP_XIESR) | 5.3 | - | 2019-06-12 |
| CVE-2019-0314 | SAP Inventory Manager和SAP Work Manager 访问控制错误漏洞 — SAP Work Manager | 7.5 | - | 2019-06-12 |
| CVE-2019-0315 | SAP NetWeaver Process Integration 信息泄露漏洞 — SAP NetWeaver Process Integration(SAP_XIESR) | 7.5 | - | 2019-06-12 |
| CVE-2019-0304 | SAP NetWeaver AS ABAP Platform 代码注入漏洞 — SAP NetWeaver AS ABAP Platform(KRNL32NUC) | 9.1 | - | 2019-06-12 |
| CVE-2019-0305 | SAP NetWeaver Process Integration 代码问题漏洞 — SAP NetWeaver Process Integration(SAP_XIESR and SAP_XITOOL) | 4.3 | - | 2019-06-12 |
| CVE-2019-0306 | SAP HANA Extended Application Services 信息泄露漏洞 — SAP HANA Extended Application Services (advanced model) | 4.3 | - | 2019-06-12 |
| CVE-2019-0307 | SAP Solution Manager 信任管理问题漏洞 — SAP Solution Manager(Diagnostics Agent) | 2.7 | - | 2019-06-12 |
| CVE-2019-0308 | SAP E-Commerce 代码注入漏洞 — SAP E-Commerce (Business-to-Consumer application) | 8.0 | - | 2019-06-12 |
| CVE-2019-0301 | SAP Identity Management REST Interface 权限许可和访问控制问题漏洞 — SAP Identity Management (REST Interface) | 8.8 | - | 2019-05-14 |
| CVE-2019-0298 | SAP E-Commerce 跨站脚本漏洞 — SAP E-Commerce (SAP-CRMJAV, SAP-CRMWEB, SAP-SHRWEB, SAP-SHRJAV, SAP-CRMAPP, SAP-SHRAPP) | 6.1 | - | 2019-05-14 |
| CVE-2019-0293 | SAP Solution Manager ST-PI 权限许可和访问控制问题漏洞 — SAP Solution Manager system (ST-PI) | 6.5 | - | 2019-05-14 |
| CVE-2019-0291 | SAP Solution Manager 信息泄露漏洞 — SAP Solution Manager | 6.2 | - | 2019-05-14 |
| CVE-2019-0289 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence platform | 7.5 | - | 2019-05-14 |
| CVE-2019-0287 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence platform (Central Management Server) | 7.5 | - | 2019-05-14 |
| CVE-2019-0280 | SAP Treasury and Risk Management 授权问题漏洞 — SAP Treasury and Risk Management(EA-FINSERV) | 8.8 | - | 2019-05-14 |
| CVE-2019-0285 | SAP Crystal Reports for Visual Studio 信息泄露漏洞 — SAP Crystal Reports for Visual Studio | 9.1 | - | 2019-04-10 |
| CVE-2019-0284 | SAP HANA 代码问题漏洞 — SAP HANA | 7.2 | - | 2019-04-10 |
| CVE-2019-0283 | SAP Netweaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Adapter Engine) | 7.1 | - | 2019-04-10 |
| CVE-2019-0282 | SAP NetWeaver Process Integration 授权问题漏洞 — SAP NetWeaver Process Integration (Runtime Workbench) | 5.3 | - | 2019-04-10 |
| CVE-2019-0279 | SAP Basis 授权问题漏洞 — SAP BASIS | 8.8 | - | 2019-04-10 |
| CVE-2019-0278 | SAP Netweaver Process Integration 信息泄露漏洞 — SAP NetWeaver Process Integration (Messaging System) | 4.3 | - | 2019-04-10 |
| CVE-2019-0268 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (CMC Module) | 8.1 | - | 2019-03-12 |
| CVE-2019-0269 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform (BI Workspace) | 5.4 | - | 2019-03-12 |
| CVE-2019-0270 | SAP Netweaver ABAP 权限许可和访问控制问题漏洞 — ABAP Platform & Server (KRNL32NUC) | 8.8 | - | 2019-03-12 |
本页汇总了 SAP SE 厂商截至目前公开的全部 778 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。