Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2023-36924 Log Injection vulnerability in SAP ERP Defense Forces and Public Security — SAP ERP Defense Forces and Public Security CWE-117 4.9 Medium 2023-07-11
CVE-2023-36922 OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) — SAP ECC and SAP S/4HANA (IS-OIL) CWE-78 9.1 Critical 2023-07-11
CVE-2023-36921 Header Injection in SAP Solution Manager (Diagnostic Agent) — SAP Solution Manager (Diagnostic Agent) CWE-644 7.2 High 2023-07-11
CVE-2023-36919 Information Disclosure in SAP Enable Now — SAP Enable Now CWE-213 5.3 Medium 2023-07-11
CVE-2023-36918 Cross-Site Scripting vulnerability in SAP Enable Now — SAP Enable Now CWE-79 6.1 Medium 2023-07-11
CVE-2023-36917 Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-307 5.9 Medium 2023-07-11
CVE-2023-35874 Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform — SAP NetWeaver AS ABAP and ABAP Platform CWE-306 6.0 Medium 2023-07-11
CVE-2023-35873 Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench) — SAP NetWeaver Process Integration (Runtime Workbench) CWE-306 6.5 Medium 2023-07-11
CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool) — SAP NetWeaver Process Integration (Message Display Tool) CWE-306 6.5 Medium 2023-07-11
CVE-2023-35871 Memory Corruption vulnerability in SAP Web Dispatcher — SAP Web Dispatcher CWE-787 7.7 High 2023-07-11
CVE-2023-35870 Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) — SAP S/4HANA (Manage Journal Entry Template) CWE-732 6.3 Medium 2023-07-11
CVE-2023-33992 Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA — SAP Business Warehouse and SAP BW/4HANA CWE-862 4.5 Medium 2023-07-11
CVE-2023-33990 Denial of Service (DoS) vulnerability in SAP SQL Anywhere — SAP SQL Anywhere CWE-732 7.8 High 2023-07-11
CVE-2023-33989 Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) — SAP NetWeaver (BI CONT ADD ON) CWE-22 8.7 High 2023-07-11
CVE-2023-33988 Cross-Site Scripting vulnerability in SAP Enable Now — SAP Enable Now CWE-79 6.1 Medium 2023-07-11
CVE-2023-33987 Request smuggling and request concatenation in SAP Web Dispatcher — SAP Web Dispatcher CWE-444 8.6 High 2023-07-11
CVE-2023-31405 Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) — SAP NetWeaver AS for Java (Log Viewer) CWE-117 5.3 Medium 2023-07-11
CVE-2023-33991 Stored Cross-Site Scripting (Stored XSS) vulnerability in SAP UI5 Variant Management — SAP UI5 Variant Management CWE-79 8.2 High 2023-06-13
CVE-2023-33986 Cross-Site Scripting (XSS) vulnerability in SAP CRM ABAP (Grantor Management) — SAP CRM ABAP (Grantor Management) CWE-79 6.1 Medium 2023-06-13
CVE-2023-33985 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-79 6.1 Medium 2023-06-13
CVE-2023-33984 Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository) — SAP NetWeaver (Design Time Repository) CWE-79 6.4 Medium 2023-06-13
CVE-2023-32115 SQL Injection in Master Data Synchronization (MDS COMPARE TOOL) — Master Data Synchronization (MDS COMPARE TOOL) CWE-89 4.2 Medium 2023-06-13
CVE-2023-32114 Denial of Service in SAP NetWeaver — SAP NetWeaver (Change and Transport System) CWE-732 2.7 Low 2023-06-13
CVE-2023-2827 Missing Authentication in SAP Plant Connectivity and Production Connector for SAP Digital — SAP Plant Connectivity CWE-306 7.9 High 2023-06-13
CVE-2023-32112 Missing Authorization Check in Vendor Master Hierarchy — Vendor Master Hierarchy CWE-862 2.8 Low 2023-05-09
CVE-2023-32113 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for Windows CWE-200 7.5 High 2023-05-09
CVE-2023-32111 Memory Corruption vulnerability in SAP PowerDesigner (Proxy) — SAP PowerDesigner (Proxy) CWE-787 7.5 High 2023-05-09
CVE-2023-31407 Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation — SAP Business Planning and Consolidation CWE-79 5.4 Medium 2023-05-09
CVE-2023-31406 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-79 6.1 Medium 2023-05-09
CVE-2023-31404 Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) — SAP BusinessObjects Business Intelligence Platform (Central Management Service) CWE-200 5.0 Medium 2023-05-09

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.