Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2024-42373 Missing Authorization Check in SAP Student Life Cycle Management (SLcM) — SAP Student Life Cycle Management (SLcM) CWE-862 4.3 Medium 2024-08-13
CVE-2024-41734 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-862 4.3 Medium 2024-08-13
CVE-2024-41736 Information Disclosure vulnerability in SAP Permit to Work — SAP Permit to Work CWE-200 4.3 Medium 2024-08-13
CVE-2024-41731 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-434 3.1 Low 2024-08-13
CVE-2024-28166 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-434 3.7 Low 2024-08-13
CVE-2024-42375 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-434 4.3 Medium 2024-08-13
CVE-2024-41732 Improper Access Control in SAP Netweaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-284 4.7 Medium 2024-08-13
CVE-2024-41737 Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management) — SAP CRM ABAP (Insights Management) CWE-918 5.0 Medium 2024-08-13
CVE-2024-41733 Information Disclosure Vulnerability in SAP Commerce — SAP Commerce CWE-200 5.3 Medium 2024-08-13
CVE-2024-41735 Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice — SAP Commerce Backoffice CWE-79 5.4 Medium 2024-08-13
CVE-2024-33005 Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server — SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server CWE-862 6.3 Medium 2024-08-13
CVE-2024-42377 Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework — SAP Shared Service Framework CWE-862 4.3 Medium 2024-08-13
CVE-2024-42376 Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework — SAP Shared Service Framework CWE-862 6.5 Medium 2024-08-13
CVE-2024-33003 Information Disclosure Vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-200 7.4 High 2024-08-13
CVE-2024-42374 XML injection in SAP BEx Web Java Runtime Export Web Service — SAP BEx Web Java Runtime Export Web Service CWE-91 8.2 High 2024-08-13
CVE-2024-41730 Missing Authentication check in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-862 9.8 Critical 2024-08-13
CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now — SAP Enable Now CWE-434 3.3 Low 2024-07-09
CVE-2024-37180 [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-200 4.1 Medium 2024-07-09
CVE-2024-39596 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now — SAP Enable Now CWE-862 4.3 Medium 2024-07-09
CVE-2024-39599 [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-693 4.7 Medium 2024-07-09
CVE-2024-37171 [CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal) — SAP Transportation Management (Collaboration Portal) CWE-918 5.0 Medium 2024-07-09
CVE-2024-39600 [CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for Windows CWE-200 5.0 Medium 2024-07-09
CVE-2024-34689 [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services) — SAP Business Workflow (WebFlow Services) CWE-918 5.0 Medium 2024-07-09
CVE-2024-37172 [CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management) — SAP S/4HANA Finance (Advanced Payment Management) CWE-862 5.4 Medium 2024-07-09
CVE-2024-39595 [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation — SAP Business Warehouse - Business Planning and Simulation CWE-79 5.4 Medium 2024-07-09
CVE-2024-39594 [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation — SAP Business Warehouse - Business Planning and Simulation CWE-79 6.1 Medium 2024-07-09
CVE-2024-37175 [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) — SAP CRM WebClient UI CWE-862 4.3 Medium 2024-07-09
CVE-2024-39598 [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) — SAP CRM WebClient UI CWE-918 5.0 Medium 2024-07-09
CVE-2024-37174 [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) — SAP CRM WebClient UI CWE-79 6.1 Medium 2024-07-09
CVE-2024-37173 [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) — SAP CRM WebClient UI CWE-79 6.1 Medium 2024-07-09

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.