SAP SE 厂商相关 778 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,核心产品涵盖 ERP、CRM 及数据分析平台。其系统历史漏洞多集中于远程代码执行、SQL 注入及身份验证绕过,常因配置不当或组件缺陷引发数据泄露。近期安全事件多涉及未授权访问与权限提升,凸显复杂集成环境下的风险。企业需强化补丁管理与访问控制,以应对持续演进的威胁态势,保障业务连续性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-6220 | SAP Business Objects Business Intelligence Platform 跨站脚本漏洞 — SAP Business Objects Business Intelligence Platform | 6.1 | - | 2022-06-06 |
| CVE-2022-29617 | Contributor License Agreement assistant 安全漏洞 — CLA Assistant CWE-755 | 6.5 | - | 2022-06-06 |
| CVE-2022-29616 | SAP Host Agent 缓冲区错误漏洞 — SAP NetWeaver and ABAP Platform CWE-787 | 9.8 | - | 2022-05-11 |
| CVE-2022-29613 | SAP Employee Self Service 输入验证错误漏洞 — SAP Employee Self Service (Fiori My Leave Request) CWE-20 | 4.3 | - | 2022-05-11 |
| CVE-2022-29611 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-862 | 8.8 | - | 2022-05-11 |
| CVE-2022-29610 | SAP NetWeaver Application Server 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP CWE-79 | 5.4 | - | 2022-05-11 |
| CVE-2022-28774 | SAP Host Agent 信息泄露漏洞 — SAP Host Agent CWE-863 | 5.5 | - | 2022-05-11 |
| CVE-2022-28214 | SAP Business Objects 安全漏洞 — SAP BusinessObjects Enterprise (Central Management Server) CWE-312 | 7.8 | - | 2022-05-11 |
| CVE-2022-27656 | SAP Web Dispatcher 跨站脚本漏洞 — SAP NetWeaver AS for ABAP and Java (ICM Administration UI) CWE-79 | 6.1 | - | 2022-05-11 |
| CVE-2022-28215 | SAP NetWeaver ABAP Server 输入验证错误漏洞 — SAP NetWeaver ABAP Server and ABAP Platform CWE-601 | 4.7 | - | 2022-04-12 |
| CVE-2022-28772 | SAP Web Dispatcher 缓冲区错误漏洞 — SAP NetWeaver (Internet Communication Manager) CWE-121 | 7.5 | - | 2022-04-12 |
| CVE-2022-27671 | SAP Web dispatcher安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-201 | 6.5 | - | 2022-04-12 |
| CVE-2022-27669 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for Java CWE-862 | 9.8 | - | 2022-04-12 |
| CVE-2022-28773 | SAP Web Dispatcher 和 SAP Internet Communication Manager 资源管理错误漏洞 — SAP NetWeaver (Internet Communication Manager) CWE-674 | 7.5 | - | 2022-04-12 |
| CVE-2022-27657 | SAP Focused Run 路径遍历漏洞 — SAP Focused Run (Simple Diagnostics Agent) CWE-22 | 2.7 | - | 2022-04-12 |
| CVE-2022-28770 | SAPUI5 library 跨站脚本漏洞 — SAPUI5 (vbm library) CWE-79 | 6.1 | - | 2022-04-12 |
| CVE-2022-28216 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform (BI Workspace) CWE-79 | 6.1 | - | 2022-04-12 |
| CVE-2022-28213 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-112 | 8.1 | - | 2022-04-12 |
| CVE-2022-27654 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-27670 | SAP SQL Anywhere 安全漏洞 — SAP SQL Anywhere Server CWE-99 | 6.5 | - | 2022-04-12 |
| CVE-2022-22541 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-213 | 6.5 | - | 2022-04-12 |
| CVE-2022-27655 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-26106 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-26105 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | - | 2022-04-12 |
| CVE-2022-26108 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-26109 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-27667 | SAP BusinessObjects Business Intelligence platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-200 | 7.5 | - | 2022-04-12 |
| CVE-2022-26107 | SAP 3D Visual Enterprise Viewer 输入验证错误漏洞 — SAP 3D Visual Enterprise Viewer CWE-20 | 6.5 | - | 2022-04-12 |
| CVE-2022-27658 | SAP Innovation management 安全漏洞 — SAP Innovation management CWE-862 | 7.5 | - | 2022-03-28 |
| CVE-2022-24397 | SAP Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | - | 2022-03-09 |
本页汇总了 SAP SE 厂商截至目前公开的全部 778 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。