Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2024-22124 Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager — SAP NetWeaver (Internet Communication Manager) CWE-497 4.1 Medium 2024-01-09
CVE-2024-21738 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform — SAP NetWeaver ABAP Application Server and ABAP Platform CWE-79 4.1 Medium 2024-01-09
CVE-2024-21737 Code Injection vulnerability in SAP Application Interface Framework (File Adapter) — SAP Application Interface Framework (File Adapter) CWE-94 8.4 High 2024-01-09
CVE-2024-21736 Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management) — SAP S/4HANA Finance (Advanced Payment Management) CWE-863 6.4 Medium 2024-01-09
CVE-2024-21735 Improper Authorization check in SAP LT Replication Server — SAP LT Replication Server CWE-863 7.3 High 2024-01-09
CVE-2024-21734 URL Redirection vulnerability in SAP Marketing (Contacts App) — SAP Marketing (Contacts App) CWE-601 3.7 Low 2024-01-09
CVE-2023-50424 Escalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) — github.com/sap/cloud-security-client-go CWE-749 9.1 Critical 2023-12-12
CVE-2023-50423 Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec) — sap-xssec CWE-749 9.1 Critical 2023-12-12
CVE-2023-6542 Improper Export of Android Application Components in SAP EMARSYS SDK ANDROID — SAP EMARSYS SDK ANDROID CWE-863 7.1 High 2023-12-12
CVE-2023-49587 Command Injection vulnerability in SAP Solution Manager — SAP Solution Manager CWE-77 6.4 Medium 2023-12-12
CVE-2023-49584 Client-Side Desynchronization vulnerability in SAP Fiori Launchpad — SAP Fiori Launchpad CWE-444 4.3 Medium 2023-12-12
CVE-2023-50422 Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) — cloud-security-services-integration-library CWE-749 9.1 Critical 2023-12-12
CVE-2023-49583 Escalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec) — @sap/xssec CWE-749 9.1 Critical 2023-12-12
CVE-2023-49581 SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-89 4.1 Medium 2023-12-12
CVE-2023-49580 Information disclosure in SAP GUI for Windows and SAP GUI for Java — SAP GUI for Windows and SAP GUI for Java CWE-732 7.3 High 2023-12-12
CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector — SAP Cloud Connector CWE-732 3.5 Low 2023-12-12
CVE-2023-49577 Cross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution) — SAP HCM (SMART PAYE solution) CWE-79 6.1 Medium 2023-12-12
CVE-2023-49058 Directory Traversal vulnerability in SAP Master Data Governance — SAP Master Data Governance CWE-22 3.5 Low 2023-12-12
CVE-2023-42481 Improper Access Control vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-640 8.1 High 2023-12-12
CVE-2023-42479 Cross-Site Scripting (XSS) vulnerability in SAP Biller Direct — SAP Biller Direct CWE-79 6.1 Medium 2023-12-12
CVE-2023-42478 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform — Business Objects BI Platform CWE-79 7.5 High 2023-12-12
CVE-2023-42476 Cross Site Scripting vulnerability in SAP BusinessObjects Web Intelligence — SAP BusinessObjects Web Intelligence CWE-79 6.8 Medium 2023-12-12
CVE-2023-42480 Information Disclosure in NetWeaver AS Java Logon — NetWeaver AS Java CWE-307 5.3 Medium 2023-11-14
CVE-2023-41366 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-497 5.3 Medium 2023-11-14
CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation — SAP Business One CWE-863 9.6 Critical 2023-11-14
CVE-2023-42477 Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) — SAP NetWeaver AS Java CWE-918 6.5 Medium 2023-10-10
CVE-2023-42475 Information Disclosure Vulnerability in Statutory Reporting — SAP S/4HANA Core CWE-209 4.3 Medium 2023-10-10
CVE-2023-42474 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence — SAP BusinessObjects Web Intelligence CWE-79 6.8 Medium 2023-10-10
CVE-2023-42473 Missing Authorization Check In S/4HANA (Manage Withholding Tax Items) — S/4HANA (Manage Withholding Tax Items) CWE-862 5.4 Medium 2023-10-10
CVE-2023-41365 Information Disclosure vulnerability in SAP Business One (B1i) — SAP Business One (B1i) CWE-611 4.3 Medium 2023-10-10

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.