Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2025-30011 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-497 5.3 Medium 2025-05-13
CVE-2025-30010 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-601 6.1 Medium 2025-05-13
CVE-2025-30009 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-79 6.1 Medium 2025-05-13
CVE-2025-26662 Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management Console — SAP Data Services Management Console CWE-79 4.4 Medium 2025-05-13
CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server) — SAP NetWeaver (Visual Composer development server) CWE-434 10.0 Critical 2025-04-24
CVE-2025-31328 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) — SAP S/4 HANA (Learning Solution) CWE-352 4.6 Medium 2025-04-22
CVE-2025-31327 OData meta-data property entity tampering in SAP Field Logistics — SAP Field Logistics CWE-472 4.3 Medium 2025-04-22
CVE-2025-31333 Odata meta-data tampering in SAP S4CORE entity — SAP S4CORE entity CWE-472 4.3 Medium 2025-04-08
CVE-2025-31332 Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-277 6.6 Medium 2025-04-08
CVE-2025-31331 Authorization Bypass vulnerability in SAP NetWeaver — SAP NetWeaver CWE-863 4.3 Medium 2025-04-08
CVE-2025-31330 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) — SAP Landscape Transformation (Analysis Platform) CWE-94 9.9 Critical 2025-04-08
CVE-2025-30017 Missing Authorization check in SAP Solution Manager — SAP Solution Manager CWE-862 4.4 Medium 2025-04-08
CVE-2025-30016 Authentication Bypass Vulnerability in SAP Financial Consolidation — SAP Financial Consolidation CWE-921 9.8 Critical 2025-04-08
CVE-2025-30015 Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) — SAP NetWeaver and ABAP Platform (Application Server ABAP) CWE-787 4.1 Medium 2025-04-08
CVE-2025-30014 Directory Traversal vulnerability in SAP Capital Yield Tax Management — SAP Capital Yield Tax Management CWE-35 7.7 High 2025-04-08
CVE-2025-30013 Code Injection vulnerability in SAP ERP BW Business Content — SAP ERP BW Business Content CWE-94 6.7 Medium 2025-04-08
CVE-2025-27437 Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface) — SAP NetWeaver Application Server ABAP (Virus Scan Interface) CWE-862 4.3 Medium 2025-04-08
CVE-2025-27435 Information Disclosure Vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-862 4.2 Medium 2025-04-08
CVE-2025-27429 Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) — SAP S/4HANA (Private Cloud) CWE-94 9.9 Critical 2025-04-08
CVE-2025-27428 Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) — SAP NetWeaver and ABAP Platform (Service Data Collection) CWE-862 7.7 High 2025-04-08
CVE-2025-26657 Information Disclosure vulnerability in SAP KMC WPC — SAP KMC WPC CWE-862 5.3 Medium 2025-04-08
CVE-2025-26654 Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud) — SAP Commerce Cloud (Public Cloud) CWE-319 6.8 Medium 2025-04-08
CVE-2025-26653 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) — SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) CWE-79 4.7 Medium 2025-04-08
CVE-2025-23186 Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-94 8.5 High 2025-04-08
CVE-2025-27436 Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) — SAP S/4HANA (Manage Bank Statements) CWE-639 4.3 Medium 2025-03-11
CVE-2025-27434 Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI) — SAP Commerce (Swagger UI) CWE-79 8.8 High 2025-03-11
CVE-2025-27433 Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) — SAP S/4HANA (Manage Bank Statements) CWE-639 4.3 Medium 2025-03-11
CVE-2025-27432 Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit) — SAP Electronic Invoicing for Brazil (eDocument Cockpit) CWE-862 2.4 Low 2025-03-11
CVE-2025-27431 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java — SAP NetWeaver Application Server Java CWE-79 5.4 Medium 2025-03-11
CVE-2025-27430 Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) — SAP CRM and SAP S/4HANA (Interaction Center) CWE-918 3.5 Low 2025-03-11

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.