SAP_SE 厂商相关 644 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商，其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本，常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商，其系统稳定性与数据完整性对众多大型企业至关重要，需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-89124 | SAP GTS 产品目录授权检查缺失漏洞 — SAP HANA (Display Product Catalog Based on Customs Declaration) CWE-863 | 4.3 | Medium | 2026-10-13 |
| CVE-2026-89122 | SAP NetWeaver企业门户开放重定向漏洞 — SAP NetWeaver Enterprise Portal CWE-601 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-89121 | SAP S/4HANA 线性资产 RAP 对象缺身份验证漏洞 — SAP S/4HANA (Linear Asset Management RAP Business Object) CWE-862 | 4.7 | Medium | 2026-10-13 |
| CVE-2026-89120 | SAP ABAP Platform 缺失授权检查漏洞 — SAP ABAP Platform CWE-1188 | 7.1 | High | 2026-10-13 |
| CVE-2026-89118 | SAP NetWeaver企业门户信息泄露漏洞 — SAP NetWeaver Enterprise Portal CWE-552 | 5.3 | Medium | 2026-10-13 |
| CVE-2026-89117 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-89116 | VS Code Yeoman-UI 扩展命令注入漏洞 — SAP yeoman-ui CWE-78 | 5.9 | Medium | 2026-10-13 |
| CVE-2026-89113 | SAP Commerce Cloud 出箱代码 SQL 注入漏洞 — SAP Commerce Cloud (OOTB Code) CWE-89 | 8.8 | High | 2026-10-13 |
| CVE-2026-89112 | CLA-Assistant CLA签名个人信息泄露漏洞 — CLA-Assistant CWE-862 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-89111 | SAP Cloud SDK for Python OAuth2 SSRF漏洞 — SAP Cloud CWE-918 | 10.0 | Critical | 2026-10-13 |
| CVE-2026-89110 | SAP NetWeaver Visual Composer 越权访问漏洞 — SAP NetWeaver Visual Composer CWE-749 | 9.9 | Critical | 2026-10-13 |
| CVE-2026-89108 | SAP Manufacturing Integration and Intelligence 配置服务缺少授权检查漏洞 — SAP Manufacturing Integration and Intelligence (Configuration Service) CWE-862 | 9.1 | Critical | 2026-10-13 |
| CVE-2026-89107 | SAP S/4HANA 代码注入漏洞 — SAP S/4HANA (Manage Substitution/Validation Rules) CWE-94 | 9.9 | Critical | 2026-10-13 |
| CVE-2026-89106 | SAPUI5 跨站脚本（XSS）漏洞 — SAPUI5 CWE-183 | 4.4 | Medium | 2026-10-13 |
| CVE-2026-89105 | SAP Cloud Security Services Integration Library 身份验证漏洞 — SAP/cloud-security-services-integration-library CWE-1188 | 4.2 | Medium | 2026-10-13 |
| CVE-2026-76976 | SAP NetWeaver AS ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) CWE-79 | 5.4 | Medium | 2026-10-13 |
| CVE-2026-76975 | SAPUI5 跨站脚本漏洞（Support Assistant Overlay） — SAPUI5 (Support Assistant Overlay) CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-76972 | SAP Manufacturing Integration and Intelligence 跨站脚本漏洞 — SAP Manufacturing Integration and Intelligence CWE-79 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-58249 | SAP NetWeaver及Web Dispatcher内存破坏漏洞 — SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) CWE-191 | 7.5 | High | 2026-10-13 |
| CVE-2026-58242 | SAP Cloud Connector 权限检查漏洞 — SAP Cloud Connector CWE-191 | 3.5 | Low | 2026-10-13 |
| CVE-2026-76974 | SAP Fiori Launchpad 信息泄露漏洞 — SAP Fiori Launchpad CWE-95 | 5.3 | Medium | 2026-09-22 |
| CVE-2026-76977 | SAP UI5 输入验证错误漏洞 — SAPUI5(Frame Options Allowlist) CWE-1289 | 4.3 | Medium | 2026-09-08 |
| CVE-2026-76971 | SAP Manufacturing Integration and Intelligence 服务端请求伪造漏洞 — SAP Manufacturing Integration and Intelligence CWE-918 | 6.5 | Medium | 2026-09-08 |
| CVE-2026-76969 | SAP Cloud Application Programming Model 信任管理问题漏洞 — SAP Cloud Application Programming Model (CAP) CWE-522 | 9.4 | Critical | 2026-09-08 |
| CVE-2026-76968 | SAP Web Dispatcher, Internet Communication Manager and SAP Content Server 信息泄露漏洞 — SAP Web Dispatcher, Internet Communication Manager and SAP Content Server CWE-497 | 6.5 | Medium | 2026-09-08 |
| CVE-2026-76967 | SAP NetWeaver Business Client 反序列化注入漏洞 — SAP NetWeaver Business Client CWE-502 | 7.8 | High | 2026-09-08 |
| CVE-2026-76963 | SAP NetWeaver and ABAP Platform 授权问题漏洞 — SAP NetWeaver and ABAP Platform CWE-862 | 4.3 | Medium | 2026-09-08 |
| CVE-2026-76962 | SAP S/4HANA 授权问题漏洞 — SAP S/4HANA (Manage Bank Chains app) CWE-862 | 4.3 | Medium | 2026-09-08 |
| CVE-2026-76961 | SAP S/4HANA 跨站请求伪造漏洞 — SAP S/4HANA (Finance for Advanced Payment Management) CWE-352 | 3.5 | Low | 2026-09-08 |
| CVE-2026-76960 | SAP S/4HANA 跨站请求伪造漏洞 — SAP S/4HANA (Finance for Advanced Payment Management) CWE-352 | 3.5 | Low | 2026-09-08 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。