Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2025-26661 Missing Authorization check in SAP NetWeaver (ABAP Class Builder) — SAP NetWeaver (ABAP Class Builder) CWE-862 8.8 High 2025-03-11
CVE-2025-26660 Broken Access Control in SAP Fiori apps (Posting Library) — SAP Fiori apps (Posting Library) CWE-639 4.3 Medium 2025-03-11
CVE-2025-26659 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) — SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) CWE-79 6.1 Medium 2025-03-11
CVE-2025-26658 Broken Authentication in SAP Business One (Service Layer) — SAP Business One (Service Layer) CWE-384 6.8 Medium 2025-03-11
CVE-2025-26656 Missing Authorization check in S/4HANA (Manage Purchasing Info Records) — S/4HANA (Manage Purchasing Info Records) CWE-862 4.3 Medium 2025-03-11
CVE-2025-26655 Missing Authorization check in SAP JIT(Outbound) — SAP Just In Time CWE-862 3.1 Low 2025-03-11
CVE-2025-25245 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) — SAP BusinessObjects Business Intelligence Platform (Web Intelligence) CWE-79 5.4 Medium 2025-03-11
CVE-2025-25244 Missing Authorization Check in SAP Business Warehouse (Process Chains) — SAP Business Warehouse (Process Chains) CWE-862 5.7 Medium 2025-03-11
CVE-2025-25242 Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-79 6.1 Medium 2025-03-11
CVE-2025-23194 Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) — SAP NetWeaver Enterprise Portal (OBN component) CWE-306 5.3 Medium 2025-03-11
CVE-2025-23188 Missing Authorization check in SAP S/4HANA (RBD) — SAP S/4HANA (RBD) CWE-862 4.3 Medium 2025-03-11
CVE-2025-23185 Information Disclosure in SAP Business Objects Business Intelligence Platform — SAP Business Objects Business Intelligence Platform CWE-209 4.1 Medium 2025-03-11
CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager — SAP Web Dispatcher and Internet Communication Manager CWE-532 4.9 Medium 2025-03-11
CVE-2025-0062 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) — SAP BusinessObjects Business Intelligence Platform CWE-79 4.7 Medium 2025-03-11
CVE-2025-25243 Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) — SAP Supplier Relationship Management (Master Data Management Catalog) CWE-22 8.6 High 2025-02-11
CVE-2025-25241 Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests) — SAP Fiori Apps Reference Library (My Overtime Requests) CWE-862 5.4 Medium 2025-02-11
CVE-2025-24876 Authentication bypass via authorization code injection in SAP Approuter — SAP Approuter Node.js package CWE-1287 8.1 High 2025-02-11
CVE-2025-24875 SameSite Defense in Depth not applied for some cookies in SAP Commerce — SAP Commerce CWE-352 6.8 Medium 2025-02-11
CVE-2025-24874 Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice — SAP Commerce (Backoffice) CWE-1021 6.8 Medium 2025-02-11
CVE-2025-24872 Missing Authorization check in SAP ABAP Platform (ABAP Build Framework) — SAP ABAP Platform (ABAP Build Framework) CWE-863 4.3 Medium 2025-02-11
CVE-2025-24870 Insecure Key & Secret Management vulnerability in SAP GUI for Windows — SAP GUI for Windows CWE-921 6.0 Medium 2025-02-11
CVE-2025-24869 Information Disclosure vulnerability in SAP NetWeaver Application Server Java — SAP NetWeaver Application Server Java CWE-863 4.3 Medium 2025-02-11
CVE-2025-24868 Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services) — SAP HANA extended application services, advanced model (User Account and Authentication Services) CWE-601 7.1 High 2025-02-11
CVE-2025-24867 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad) — SAP BusinessObjects Platform (BI Launchpad) CWE-79 6.1 Medium 2025-02-11
CVE-2025-23193 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Server ABAP CWE-204 5.3 Medium 2025-02-11
CVE-2025-23191 Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP — SAP Fiori for SAP ERP CWE-644 3.1 Low 2025-02-11
CVE-2025-23190 Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) — SAP NetWeaver and ABAP platform (ST-PI) CWE-862 4.3 Medium 2025-02-11
CVE-2025-23189 Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) — SAP NetWeaver and ABAP Platform (SDCCN) CWE-862 4.3 Medium 2025-02-11
CVE-2025-23187 Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) — SAP NetWeaver and ABAP Platform (SDCCN) CWE-862 5.3 Medium 2025-02-11
CVE-2025-0064 Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console) — SAP BusinessObjects Business Intelligence platform (Central Management Console) CWE-732 8.7 High 2025-02-11

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.