SAP_SE 厂商相关 571 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商，其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本，常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商，其系统稳定性与数据完整性对众多大型企业至关重要，需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-58246 | SAP NetWeaver Application Server for ABAP 信息泄露漏洞 — SAP NetWeaver Application Server for ABAPCWE-497 | 4.3 | Medium | 2026-07-28 |
| CVE-2026-44767 | SAP ui5 跨站脚本漏洞 — @ui5/webcomponents-baseCWE-79 | 6.1 | Medium | 2026-07-14 |
| CVE-2026-58233 | SAP Change and Transport System Attach Tool 反序列化注入漏洞 — SAP Change and Transport System Attach Tool (ctsattach)CWE-502 | 7.6 | High | 2026-07-14 |
| CVE-2026-44771 | SAP S/4HANA 授权问题漏洞 — SAP S/4HANA (Draft operation)CWE-862 | 4.3 | Medium | 2026-07-14 |
| CVE-2026-44770 | SAP S/4 HANA 授权问题漏洞 — SAP S/4 HANA (Create Single Payment)CWE-862 | 4.3 | Medium | 2026-07-14 |
| CVE-2026-44769 | SAP S/4HANA SQL注入漏洞 — SAP S/4HANA Project Management (PPM-PRO)CWE-89 | 5.5 | Medium | 2026-07-14 |
| CVE-2026-44768 | SAP crm - webclient ui 配置错误漏洞 — SAP CRM (WebClient UI)CWE-15 | 4.1 | Medium | 2026-07-14 |
| CVE-2026-44761 | SAP Commerce Cloud 信任管理问题漏洞 — SAP Commerce CloudCWE-1392 | 9.1 | Critical | 2026-07-14 |
| CVE-2026-44760 | SAP NetWeaver Application Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)CWE-79 | 4.7 | Medium | 2026-07-14 |
| CVE-2026-44759 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise PortalCWE-79 | 6.1 | Medium | 2026-07-14 |
| CVE-2026-44753 | SAP HANA Database 侧信道信息泄露漏洞 — SAP HANA Extended Application Services classic model (User Self Service)CWE-204 | 3.7 | Low | 2026-07-14 |
| CVE-2026-44752 | SAP NetWeaver Application Server Java 跨站脚本漏洞 — SAP NetWeaver Application Server Java(Configuration Wizard)CWE-79 | 8.2 | High | 2026-07-14 |
| CVE-2026-44747 | SAP NetWeaver Application Server ABAP 缓冲区错误漏洞 — SAP NetWeaver Application Server ABAPCWE-787 | 9.9 | Critical | 2026-07-14 |
| CVE-2026-44745 | SAP Approuter 输入验证错误漏洞 — SAP ApprouterCWE-601 | 8.1 | High | 2026-07-14 |
| CVE-2026-27690 | SAP Approuter 输入验证错误漏洞 — SAP ApprouterCWE-444 | 9.1 | Critical | 2026-07-14 |
| CVE-2026-0487 | SAP_SE SAProuter on Microsoft Windows 权限许可和访问控制问题漏洞 — SAProuter on Microsoft WindowsCWE-427 | 8.4 | High | 2026-07-14 |
| CVE-2026-44757 | SAP Wily Introscope Enterprise Manager 跨站脚本漏洞 — SAP Wily Introscope Enterprise ManagerCWE-79 | 4.7 | Medium | 2026-06-09 |
| CVE-2026-44755 | SAP Business Objects Business Intelligence Platform 访问控制错误漏洞 — SAP Business Objects Business Intelligence PlatformCWE-346 | 4.3 | Medium | 2026-06-09 |
| CVE-2026-44754 | SAP ODP Data Replication APIs 安全漏洞 — ODP Data Replication APIsCWE-862 | 6.6 | Medium | 2026-06-09 |
| CVE-2026-44751 | SAP NetWeaver ABAP Platform 安全漏洞 — SAP NetWeaver AS ABAP and ABAP PlatformCWE-862 | 7.1 | High | 2026-06-09 |
| CVE-2026-44750 | SAP MDG Review Match Groups Application 安全漏洞 — SAP MDG (Review Match Groups Application)CWE-862 | 4.3 | Medium | 2026-06-09 |
| CVE-2026-44748 | SAP NetWeaver Application Server ABAP 数据伪造问题漏洞 — SAP NetWeaver AS ABAP and ABAP PlatformCWE-347 | 9.9 | Critical | 2026-06-09 |
| CVE-2026-44746 | SAP NetWeaver AS Java 跨站脚本漏洞 — SAP NetWeaver AS Java (JDBC Test Servlet)CWE-79 | 6.1 | Medium | 2026-06-09 |
| CVE-2026-44744 | SAP S/4HANA SQL注入漏洞 — SAP S/4HANACWE-89 | 6.5 | Medium | 2026-06-09 |
| CVE-2026-44743 | SAP Business Objects 安全漏洞 — SAP Business ObjectsCWE-497 | 3.7 | Low | 2026-06-09 |
| CVE-2026-40128 | SAP NetWeaver Application Server Java 安全漏洞 — SAP NetWeaver Application Server Java (Web Container)CWE-35 | 9.0 | Critical | 2026-06-09 |
| CVE-2026-27671 | SAP NetWeaver ABAP Platform 安全漏洞 — SAP NetWeaver AS ABAP and ABAP PlatformCWE-121 | 9.8 | Critical | 2026-06-09 |
| CVE-2026-24315 | SAP Fiori 安全漏洞 — SAP Fiori (launchpad)CWE-35 | 4.2 | Medium | 2026-06-09 |
| CVE-2026-44749 | SAP Gateway 安全漏洞 — SAP GatewayCWE-497 | 4.3 | Medium | 2026-05-26 |
| CVE-2026-27680 | SAP NetWeaver Application Server ABAP 安全漏洞 — SAP NetWeaver Application Server ABAPCWE-276 | 3.1 | Low | 2026-05-14 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 571 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。