Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-58239 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-807 3.7 Low 2026-08-11
CVE-2026-58238 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-770 5.9 Medium 2026-08-11
CVE-2026-58237 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-862 5.9 Medium 2026-08-11
CVE-2026-58236 OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-78 5.5 Medium 2026-08-11
CVE-2026-58235 Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) — SAP NetWeaver AS Java (Adobe Document Services) CWE-1395 6.3 Medium 2026-08-11
CVE-2026-58230 Multiple vulnerabilities in SAP Business AI Platform (Approuter) — SAP Business AI Platform (Approuter) CWE-601 7.0 High 2026-08-11
CVE-2026-44765 Missing Authorization Check in SAP Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-862 7.3 High 2026-08-11
CVE-2026-44764 Missing Authorization Check in SAP Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-862 7.3 High 2026-08-11
CVE-2026-44763 Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-22 7.6 High 2026-08-11
CVE-2026-44762 Security Misconfiguration in SAP Data Services Management Console — SAP Data Services Management Console CWE-1021 3.7 Low 2026-08-11
CVE-2026-44758 Code Injection vulnerability in Manufacturing Integration and Intelligence — SAP Manufacturing Integration and Intelligence CWE-94 9.1 Critical 2026-08-11
CVE-2026-40130 Memory Corruption vulnerability in SAPSPrint Service — SAPSPrint Service CWE-121 5.3 Medium 2026-08-11
CVE-2026-34265 Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform — SAP NetWeaver and ABAP Platform CWE-787 9.8 Critical 2026-08-11
CVE-2026-58246 Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform — SAP NetWeaver Application Server for ABAP CWE-497 4.3 Medium 2026-07-28
CVE-2026-44767 Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection — @ui5/webcomponents-base CWE-79 6.1 Medium 2026-07-14
CVE-2026-58233 Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach) — SAP Change and Transport System Attach Tool (ctsattach) CWE-502 7.6 High 2026-07-14
CVE-2026-44771 Missing Authorization check in SAP S/4HANA (Draft operation) — SAP S/4HANA (Draft operation) CWE-862 4.3 Medium 2026-07-14
CVE-2026-44770 Missing Authorization check in SAP S/4 HANA (Create Single Payment) — SAP S/4 HANA (Create Single Payment) CWE-862 4.3 Medium 2026-07-14
CVE-2026-44769 SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO) — SAP S/4HANA Project Management (PPM-PRO) CWE-89 5.5 Medium 2026-07-14
CVE-2026-44768 Security misconfiguration in SAP CRM (WebClient UI) — SAP CRM (WebClient UI) CWE-15 4.1 Medium 2026-07-14
CVE-2026-44761 Insecure Sample Credentials in SAP Commerce Cloud — SAP Commerce Cloud CWE-1392 9.1 Critical 2026-07-14
CVE-2026-44760 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) — SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) CWE-79 4.7 Medium 2026-07-14
CVE-2026-44759 Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-79 6.1 Medium 2026-07-14
CVE-2026-44753 Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service) — SAP HANA Extended Application Services classic model (User Self Service) CWE-204 3.7 Low 2026-07-14
CVE-2026-44752 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) — SAP NetWeaver Application Server Java(Configuration Wizard) CWE-79 8.2 High 2026-07-14
CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-787 9.9 Critical 2026-07-14
CVE-2026-44745 Open Redirect vulnerability in SAP Approuter — SAP Approuter CWE-601 8.1 High 2026-07-14
CVE-2026-27690 HTTP Request Smuggling in SAP Approuter — SAP Approuter CWE-444 9.1 Critical 2026-07-14
CVE-2026-0487 DLL Hijacking vulnerability in SAProuter on Microsoft Windows — SAProuter on Microsoft Windows CWE-427 8.4 High 2026-07-14
CVE-2026-44757 Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager — SAP Wily Introscope Enterprise Manager CWE-79 4.7 Medium 2026-06-09

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.