Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-76959 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) — SAP S/4HANA (Finance for Advanced Payment Management) CWE-352 4.6 Medium 2026-09-08
CVE-2026-76958 XML External Entity (XXE) Vulnerability in SAP Integration Suite — SAP Integration Suite CWE-611 8.5 High 2026-09-08
CVE-2026-66768 Improper Access Control in SAP NetWeaver (SAP GUI for Java) — SAP NetWeaver (SAP GUI for Java) CWE-807 9.0 Critical 2026-09-08
CVE-2026-66767 Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-191 7.7 High 2026-09-08
CVE-2026-58240 Missing Authentication check in SAP NetWeaver (Message Server) — SAP NetWeaver (Message Server) CWE-308 9.8 Critical 2026-09-08
CVE-2026-58234 Denial of Service vulnerability in SAP Process Integration (SOAP Adapter) — SAP Process Integration (SOAP Adapter) CWE-776 2.2 Low 2026-09-08
CVE-2026-44766 SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) — SAP S/4HANA (Intercompany Matching and Reconciliation) CWE-89 6.5 Medium 2026-09-08
CVE-2026-44756 Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing — SAP Extended Passport (EPP) Processing CWE-120 10.0 Critical 2026-09-08
CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection) — SAP S/4HANA (Manage Supply Protection) CWE-1333 7.5 High 2026-08-25
CVE-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) — SAP Commerce Cloud (Data Hub Adapter) CWE-94 10.0 Critical 2026-08-11
CVE-2026-66779 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-79 6.3 Medium 2026-08-11
CVE-2026-66778 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-644 5.3 Medium 2026-08-11
CVE-2026-66777 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-22 5.9 Medium 2026-08-11
CVE-2026-66776 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-347 5.9 Medium 2026-08-11
CVE-2026-66775 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-352 4.3 Medium 2026-08-11
CVE-2026-66774 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-754 3.7 Low 2026-08-11
CVE-2026-66773 Server-controlled `__next` URL is not checking cross-origin — Odata CWE-601 5.9 Medium 2026-08-11
CVE-2026-66772 Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) — SAP BusinessObjects Business Intelligence Platform (Admin Tools) CWE-862 4.3 Medium 2026-08-11
CVE-2026-66771 Cross Site Scripting (XSS) vulnerability in SAPUI5 — SAPUI5 CWE-79 6.1 Medium 2026-08-11
CVE-2026-66770 SQL Injection vulnerability in SAP Social Intelligence — SAP Social Intelligence CWE-89 6.3 Medium 2026-08-11
CVE-2026-66764 Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) — SAP S/4 HANA (Reprocess Bank Statement Items) CWE-639 4.3 Medium 2026-08-11
CVE-2026-66763 Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) — SAP BusinessObjects Business Intelligence Platform (Central Management Server) CWE-321 7.9 High 2026-08-11
CVE-2026-66761 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-770 4.3 Medium 2026-08-11
CVE-2026-66760 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-295 6.4 Medium 2026-08-11
CVE-2026-58248 XML External Entity Injection in SAP BusinessObjects Business Intelligence — SAP BusinessObjects Business Intelligence CWE-611 6.5 Medium 2026-08-11
CVE-2026-58247 Memory Corruption vulnerability in SAP ABAP Platform — SAP ABAP Platform CWE-908 5.3 Medium 2026-08-11
CVE-2026-58245 Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning) — SAP Advanced Planning and Optimization (Model Mix Planning) CWE-798 3.8 Low 2026-08-11
CVE-2026-58244 Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) — SAP Manufacturing Integration and Intelligence CWE-862 4.3 Medium 2026-08-11
CVE-2026-58243 Privilege Escalation vulnerability in SAP ABAP Developer Tools — SAP ABAP Developer Tools CWE-862 8.8 High 2026-08-11
CVE-2026-58241 Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) — SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard CWE-862 4.2 Medium 2026-08-11

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.