Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2023-40310 Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import — SAP PowerDesigner Client CWE-112 6.5 Medium 2023-10-10
CVE-2023-40309 Missing Authorization check in SAP CommonCryptoLib — SAP CommonCryptoLib CWE-863 9.8 Critical 2023-09-12
CVE-2023-40621 Code Injection vulnerability in SAP PowerDesigner Client — SAP PowerDesigner Client CWE-94 6.3 Medium 2023-09-12
CVE-2023-40622 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) — SAP BusinessObjects Business Intelligence Platform (Promotion Management) CWE-732 9.9 Critical 2023-09-12
CVE-2023-40623 Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer) — SAP BusinessObjects Suite (Installer) CWE-1386 6.2 Medium 2023-09-12
CVE-2023-40624 Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering) — SAP NetWeaver AS ABAP (applications based on Unified Rendering) CWE-79 5.5 Medium 2023-09-12
CVE-2023-40625 Missing Authorization check in SAP Manage Purchase Contracts App — SAP Manage Purchase Contracts App CWE-862 5.4 Medium 2023-09-12
CVE-2023-41367 Missing Authentication check in SAP NetWeaver (Guided Procedures) — SAP NetWeaver (Guided Procedures) CWE-306 5.3 Medium 2023-09-12
CVE-2023-41368 Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps) — S4 HANA ABAP (Manage checkbook apps) CWE-639 2.7 Low 2023-09-12
CVE-2023-41369 External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) — SAP S/4HANA (Create Single Payment application) CWE-611 3.5 Low 2023-09-12
CVE-2023-42472 Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) — SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) CWE-434 8.7 High 2023-09-12
CVE-2023-40308 Memory Corruption vulnerability in SAP CommonCryptoLib — SAP CommonCryptoLib CWE-787 7.5 High 2023-09-12
CVE-2023-37489 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System) — SAP BusinessObjects Business Intelligence Platform (Version Management System) CWE-209 5.3 Medium 2023-09-12
CVE-2023-39438 Missing Authorization check allows certain operations on CLA Assistant data — CLA Assistant CWE-862 8.1 High 2023-08-15
CVE-2023-37486 Information Disclosure vulnerability in SAP Commerce (OCC API) — SAP Commerce (OCC API) CWE-524 5.9 Medium 2023-08-08
CVE-2023-39440 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence CWE-312 4.4 Medium 2023-08-08
CVE-2023-39439 SAP Commerce accepts empty passphrases. — SAP Commerce CWE-258 8.8 High 2023-08-08
CVE-2023-39437 Cross-Site Scripting (XSS) vulnerability in SAP Business One — SAP Business One CWE-79 7.6 High 2023-08-08
CVE-2023-39436 Information Disclosure in SAP Supplier Relationship Management — SAP Supplier Relationship Management CWE-306 5.8 Medium 2023-08-08
CVE-2023-37492 Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform — SAP NetWeaver AS ABAP and ABAP Platform CWE-863 4.9 Medium 2023-08-08
CVE-2023-37491 Improper Authorization check vulnerability in SAP Message Server — SAP Message Server CWE-863 7.5 High 2023-08-08
CVE-2023-37490 Binary hijack in SAP BusinessObjects Business Intelligence (Installer) — SAP BusinessObjects Business Intelligence (Installer) CWE-427 7.6 High 2023-08-08
CVE-2023-37488 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process Integration — SAP NetWeaver Process Integration CWE-79 6.1 Medium 2023-08-08
CVE-2023-37487 Security misconfiguration vulnerability in SAP Business One (Service Layer) — SAP Business One (Service Layer) CWE-497 5.3 Medium 2023-08-08
CVE-2023-37484 Information Disclosure Vulnerabilities in SAP PowerDesigner — SAP PowerDesigner CWE-327 5.3 Medium 2023-08-08
CVE-2023-37483 Improper Access Control Vulnerabilities in SAP PowerDesigner — SAP PowerDesigner CWE-306 9.8 Critical 2023-08-08
CVE-2023-36926 Information disclosure vulnerability in SAP Host Agent — SAP Host Agent CWE-306 3.7 Low 2023-08-08
CVE-2023-36923 Code Injection vulnerability in SAP PowerDesigner — SAP PowerDesigner CWE-94 7.8 High 2023-08-08
CVE-2023-33993 SQL Injection vulnerability in SAP Business One B1i Layer — SAP Business One (B1i Layer) CWE-89 7.1 High 2023-08-08
CVE-2023-36925 Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) — SAP Solution Manager (Diagnostics agent) CWE-918 7.2 High 2023-07-11

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.