SAP SE 厂商相关 778 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,核心产品涵盖 ERP、CRM 及数据分析平台。其系统历史漏洞多集中于远程代码执行、SQL 注入及身份验证绕过,常因配置不当或组件缺陷引发数据泄露。近期安全事件多涉及未授权访问与权限提升,凸显复杂集成环境下的风险。企业需强化补丁管理与访问控制,以应对持续演进的威胁态势,保障业务连续性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-39804 | SAP 3D Visual Enterprise Author 缓冲区错误漏洞 — SAP 3D Visual Enterprise Author CWE-119 | 7.8 | - | 2022-10-11 |
| CVE-2022-39803 | SAP 3D Visual Enterprise Author 缓冲区错误漏洞 — SAP 3D Visual Enterprise Author CWE-119 | 7.8 | - | 2022-10-11 |
| CVE-2022-39802 | SAP Manufacturing Execution 路径遍历漏洞 — SAP Manufacturing Execution CWE-22 | 6.5 | - | 2022-10-11 |
| CVE-2022-39800 | SAP BusinessObjects BI LaunchPad 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform (BI LaunchPad) CWE-79 | 6.1 | - | 2022-10-11 |
| CVE-2022-39015 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) CWE-668 | 6.5 | - | 2022-10-11 |
| CVE-2022-39013 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Program Objects) CWE-200 | 8.3 | - | 2022-10-11 |
| CVE-2022-35299 | SAP SQL Anywhere 安全漏洞 — SAP SQL Anywhere CWE-121 | 9.8 | - | 2022-10-11 |
| CVE-2022-35297 | SAP Enable Now 跨站脚本漏洞 — SAP Enable Now CWE-79 | 5.4 | - | 2022-10-11 |
| CVE-2022-35296 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Version Management System) CWE-200 | 6.5 | - | 2022-10-11 |
| CVE-2022-35226 | SAP Data Services Management 跨站脚本漏洞 — SAP Data Services Management Console CWE-79 | 6.1 | - | 2022-10-11 |
| CVE-2022-32244 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Commentary DB) CWE-200 | 5.2 | - | 2022-09-13 |
| CVE-2022-39014 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (CMC) CWE-311 | 7.5 | - | 2022-09-13 |
| CVE-2022-39801 | Contributor License Agreement assistant 授权问题漏洞 — SAP GRC Access Control Emergency Access Management CWE-287 | 8.8 | - | 2022-09-13 |
| CVE-2022-39799 | SAP GUI 跨站脚本漏洞 — SAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad) CWE-79 | 6.1 | - | 2022-09-13 |
| CVE-2022-35298 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal (KMC) CWE-79 | 6.1 | - | 2022-09-13 |
| CVE-2022-35294 | SAP NetWeaver Application Server 跨站脚本漏洞 — SAP NetWeaver AS ABAP CWE-79 | 5.4 | - | 2022-09-13 |
| CVE-2022-35292 | SAP Business One 代码问题漏洞 — SAP Business One CWE-428 | 7.3 | - | 2022-09-13 |
| CVE-2022-35295 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP Host Agent (SAPOSCOL) CWE-755 | 7.2 | - | 2022-09-13 |
| CVE-2022-32245 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (Open Document) CWE-319 | 8.2 | - | 2022-08-09 |
| CVE-2022-35293 | SAP Enable Now Manager 安全漏洞 — SAP Enable Now Manager CWE-862 | 9.1 | - | 2022-08-09 |
| CVE-2022-35290 | SAP Authenticator 信息泄露漏洞 — SAP Authenticator for Android CWE-200 | 7.5 | - | 2022-08-09 |
| CVE-2022-32249 | SAP S/4HANA 和 SAP Business One 安全漏洞 — SAP Business one CWE-668 | 7.5 | - | 2022-07-12 |
| CVE-2022-35224 | SAP Enterprise Portal 跨站脚本漏洞 — SAP Enterprise Portal CWE-79 | 6.1 | - | 2022-07-12 |
| CVE-2022-35228 | SAP BusinessObjects Central Management Console 跨站请求伪造漏洞 — SAP BusinessObjects Business Intelligence Platform (Central management Console) CWE-352 | 8.1 | - | 2022-07-12 |
| CVE-2022-35225 | SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | - | 2022-07-12 |
| CVE-2022-35227 | SAP NetWeaver Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal (WPC) CWE-79 | 6.1 | - | 2022-07-12 |
| CVE-2022-35172 | SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | - | 2022-07-12 |
| CVE-2022-35171 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 5.5 | - | 2022-07-12 |
| CVE-2022-35169 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (LCM) CWE-200 | 6.7 | - | 2022-07-12 |
| CVE-2022-35170 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | - | 2022-07-12 |
本页汇总了 SAP SE 厂商截至目前公开的全部 778 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。