Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-89124 Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration) — SAP HANA (Display Product Catalog Based on Customs Declaration) CWE-863 4.3 Medium 2026-10-13
CVE-2026-89122 Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-601 6.1 Medium 2026-10-13
CVE-2026-89121 Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) — SAP S/4HANA (Linear Asset Management RAP Business Object) CWE-862 4.7 Medium 2026-10-13
CVE-2026-89120 Missing authorization check in SAP ABAP Platform — SAP ABAP Platform CWE-1188 7.1 High 2026-10-13
CVE-2026-89118 Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-552 5.3 Medium 2026-10-13
CVE-2026-89117 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-79 6.1 Medium 2026-10-13
CVE-2026-89116 OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code — SAP yeoman-ui CWE-78 5.9 Medium 2026-10-13
CVE-2026-89113 SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) — SAP Commerce Cloud (OOTB Code) CWE-89 8.8 High 2026-10-13
CVE-2026-89112 Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure — CLA-Assistant CWE-862 6.5 Medium 2026-10-13
CVE-2026-89111 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python — SAP Cloud CWE-918 10.0 Critical 2026-10-13
CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer — SAP NetWeaver Visual Composer CWE-749 9.9 Critical 2026-10-13
CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) — SAP Manufacturing Integration and Intelligence (Configuration Service) CWE-862 9.1 Critical 2026-10-13
CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) — SAP S/4HANA (Manage Substitution/Validation Rules) CWE-94 9.9 Critical 2026-10-13
CVE-2026-89106 Cross Site Scripting (XSS) vulnerability in SAPUI5 — SAPUI5 CWE-183 4.4 Medium 2026-10-13
CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library — SAP/cloud-security-services-integration-library CWE-1188 4.2 Medium 2026-10-13
CVE-2026-76976 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) — SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) CWE-79 5.4 Medium 2026-10-13
CVE-2026-76975 Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay) — SAPUI5 (Support Assistant Overlay) CWE-79 6.1 Medium 2026-10-13
CVE-2026-76972 Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-79 6.5 Medium 2026-10-13
CVE-2026-58249 Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) — SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) CWE-191 7.5 High 2026-10-13
CVE-2026-58242 Improper Authorization check in SAP Cloud Connector — SAP Cloud Connector CWE-191 3.5 Low 2026-10-13
CVE-2026-76974 Information Disclosure vulnerability in SAP Fiori Launchpad — SAP Fiori Launchpad CWE-95 5.3 Medium 2026-09-22
CVE-2026-76977 Clickjacking vulnerability in SAPUI5(Frame Options Allowlist) — SAPUI5(Frame Options Allowlist) CWE-1289 4.3 Medium 2026-09-08
CVE-2026-76971 Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-918 6.5 Medium 2026-09-08
CVE-2026-76969 Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) — SAP Cloud Application Programming Model (CAP) CWE-522 9.4 Critical 2026-09-08
CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server — SAP Web Dispatcher, Internet Communication Manager and SAP Content Server CWE-497 6.5 Medium 2026-09-08
CVE-2026-76967 Insecure Deserialization in SAP NetWeaver Business Client — SAP NetWeaver Business Client CWE-502 7.8 High 2026-09-08
CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform — SAP NetWeaver and ABAP Platform CWE-862 4.3 Medium 2026-09-08
CVE-2026-76962 Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) — SAP S/4HANA (Manage Bank Chains app) CWE-862 4.3 Medium 2026-09-08
CVE-2026-76961 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) — SAP S/4HANA (Finance for Advanced Payment Management) CWE-352 3.5 Low 2026-09-08
CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) — SAP S/4HANA (Finance for Advanced Payment Management) CWE-352 3.5 Low 2026-09-08

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.