Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-34257 Open Redirect vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-601 6.1 Medium 2026-04-14
CVE-2026-34256 Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise) — SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise) CWE-862 7.1 High 2026-04-14
CVE-2026-27683 Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-79 4.1 Medium 2026-04-14
CVE-2026-27681 SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse — SAP Business Planning and Consolidation and SAP Business Warehouse CWE-89 9.9 Critical 2026-04-14
CVE-2026-27679 Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures) — SAP S/4HANA Frontend OData Service (Manage Reference Structures) CWE-862 6.5 Medium 2026-04-14
CVE-2026-27678 Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures) — SAP S/4HANA Backend OData Service (Manage Reference Structures) CWE-862 6.5 Medium 2026-04-14
CVE-2026-27677 Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment) — SAP S/4HANA OData Service (Manage Reference Equipment) CWE-862 6.5 Medium 2026-04-14
CVE-2026-27676 Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures) — SAP S/4HANA OData Service (Manage Technical Object Structures) CWE-862 4.3 Medium 2026-04-14
CVE-2026-27675 Code Injection vulnerability in SAP Landscape Transformation — SAP Landscape Transformation CWE-94 2.0 Low 2026-04-14
CVE-2026-27674 Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) — SAP NetWeaver Application Server Java (Web Dynpro Java) CWE-94 6.1 Medium 2026-04-14
CVE-2026-27673 Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise) — SAP S/4HANA (Private Cloud and On-Premise) CWE-862 4.9 Medium 2026-04-14
CVE-2026-27672 Missing Authorization check in Material Master Application — Material Master Application CWE-862 4.3 Medium 2026-04-14
CVE-2026-24318 Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-539 4.2 Medium 2026-04-14
CVE-2026-0512 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) — SAP Supplier Relationship Management (SICF Handler in SRM Catalog) CWE-79 6.1 Medium 2026-04-14
CVE-2026-27689 Denial of service (DOS) in SAP Supply Chain Management — SAP Supply Chain Management CWE-606 7.7 High 2026-03-10
CVE-2026-27688 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-862 5.0 Medium 2026-03-10
CVE-2026-27687 Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal — SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal CWE-862 5.8 Medium 2026-03-10
CVE-2026-27686 Missing Authorization check in SAP Business Warehouse (Service API) — SAP Business Warehouse (Service API) CWE-862 5.9 Medium 2026-03-10
CVE-2026-27685 Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration — SAP NetWeaver Enterprise Portal Administration CWE-502 9.1 Critical 2026-03-10
CVE-2026-27684 SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification) — SAP NetWeaver (Feedback Notification) CWE-89 6.4 Medium 2026-03-10
CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT — SAP GUI for Windows with active GuiXT CWE-427 5.0 Medium 2026-03-10
CVE-2026-24316 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-918 6.4 Medium 2026-03-10
CVE-2026-24313 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI) — SAP Solution Tools Plug-In (ST-PI) CWE-862 5.0 Medium 2026-03-10
CVE-2026-24311 Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0 — SAP Customer Checkout 2.0 CWE-312 5.6 Medium 2026-03-10
CVE-2026-24310 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-862 3.5 Low 2026-03-10
CVE-2026-24309 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-862 6.4 Medium 2026-03-10
CVE-2026-0489 DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service) — SAP Business One (Job Service) CWE-79 6.1 Medium 2026-03-10
CVE-2026-24314 Information Disclosure vulnerability in S/4HANA (Manage Payment Media) — S/4HANA (Manage Payment Media) CWE-497 4.3 Medium 2026-02-24
CVE-2026-24328 Open Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) — Business Server Pages Application (TAF_APPLAUNCHER) CWE-601 6.1 Medium 2026-02-10
CVE-2026-24327 Missing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application) — SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application) CWE-862 4.3 Medium 2026-02-10

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.