Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2025-42995 Multiple vulnerabilities in SAP MDM Server — SAP MDM Server CWE-590 7.5 High 2025-06-10
CVE-2025-42994 Multiple vulnerabilities in SAP MDM Server — SAP MDM Server CWE-590 7.5 High 2025-06-10
CVE-2025-42993 Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) — SAP S/4HANA (Enterprise Event Enablement) CWE-862 6.7 Medium 2025-06-10
CVE-2025-42991 Missing Authorization check in SAP S/4HANA (Bank Account Application) — SAP S/4HANA (Bank Account Application) CWE-862 4.3 Medium 2025-06-10
CVE-2025-42990 HTML Injection in Unprotected SAPUI5 applications — SAPUI5 applications CWE-79 3.0 Low 2025-06-10
CVE-2025-42989 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-862 9.6 Critical 2025-06-10
CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform — SAP Business Objects Business Intelligence Platform CWE-918 3.7 Low 2025-06-10
CVE-2025-42987 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) — SAP S/4HANA (Manage Processing Rules - For Bank Statement) CWE-862 4.3 Medium 2025-06-10
CVE-2025-42984 Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) — SAP S/4HANA (Manage Central Purchase Contract application) CWE-862 5.4 Medium 2025-06-10
CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis — SAP Business Warehouse and SAP Plug-In Basis CWE-862 8.5 High 2025-06-10
CVE-2025-42982 Information Disclosure in SAP GRC (AC Plugin) — SAP GRC (AC Plugin) CWE-862 8.8 High 2025-06-10
CVE-2025-42977 Directory Traversal vulnerability in SAP NetWeaver Visual Composer — SAP NetWeaver Visual Composer CWE-22 7.6 High 2025-06-10
CVE-2025-31325 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) — SAP NetWeaver (ABAP Keyword Documentation) CWE-79 5.8 Medium 2025-06-10
CVE-2025-23192 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) — SAP BusinessObjects Business Intelligence (BI Workspace) CWE-79 8.2 High 2025-06-10
CVE-2025-43011 Missing Authorization Check in SAP Landscape Transformation (PCL Basis) — SAP Landscape Transformation (PCL Basis) CWE-862 7.7 High 2025-05-13
CVE-2025-43010 Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL)) — SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) CWE-94 8.3 High 2025-05-13
CVE-2025-43009 Missing Authorization check in SAP Service Parts Management (SPM) — SAP Service Parts Management (SPM) CWE-862 6.3 Medium 2025-05-13
CVE-2025-43008 Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal — SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal CWE-862 5.8 Medium 2025-05-13
CVE-2025-43007 Missing Authorization check in SAP Service Parts Management (SPM) — SAP Service Parts Management (SPM) CWE-862 6.3 Medium 2025-05-13
CVE-2025-43006 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) — SAP Supplier Relationship Management (Master Data Management Catalog) CWE-79 6.1 Medium 2025-05-13
CVE-2025-43005 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for Windows CWE-256 4.3 Medium 2025-05-13
CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard) — SAP Digital Manufacturing (Production Operator Dashboard) CWE-862 5.3 Medium 2025-05-13
CVE-2025-43003 Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) — SAP S/4HANA (Private Cloud & On-Premise) CWE-749 6.4 Medium 2025-05-13
CVE-2025-43002 Missing Authorization check in SAP S4/HANA (OData meta-data property) — SAP S4/HANA (OData meta-data property) CWE-472 4.3 Medium 2025-05-13
CVE-2025-43000 Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) — SAP Business Objects Business Intelligence Platform (PMW) CWE-862 7.9 High 2025-05-13
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server) — SAP NetWeaver (Visual Composer development server) CWE-502 9.1 Critical 2025-05-13
CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client — SAP Gateway Client CWE-732 6.6 Medium 2025-05-13
CVE-2025-31329 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-141 6.2 Medium 2025-05-13
CVE-2025-30018 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-611 8.6 High 2025-05-13
CVE-2025-30012 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-502 10.0 Critical 2025-05-13

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.