Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-24326 Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations) — SAP S/4HANA Defense & Security (Disconnected Operations) CWE-862 4.3 Medium 2026-02-10
CVE-2026-24325 Cross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console) — SAP BusinessObjects Enterprise (Central Management Console) CWE-79 4.8 Medium 2026-02-10
CVE-2026-24324 Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) — SAP BusinessObjects Business Intelligence Platform (AdminTools) CWE-405 6.5 Medium 2026-02-10
CVE-2026-24323 Multiple vulnerabilities in BSP Applications of SAP Document Management System — SAP Document Management System CWE-601 6.1 Medium 2026-02-10
CVE-2026-24322 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI) — SAP Solution Tools Plug-In (ST-PI) CWE-862 7.7 High 2026-02-10
CVE-2026-24321 Information Disclosure vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-359 5.3 Medium 2026-02-10
CVE-2026-24320 Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) — SAP NetWeaver and ABAP Platform (Application Server ABAP) CWE-113 3.1 Low 2026-02-10
CVE-2026-24319 Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files) — SAP Business One (B1 Client Memory Dump Files) CWE-316 5.8 Medium 2026-02-10
CVE-2026-24312 Missing authorization check in SAP Business Workflow — SAP Business Workflow CWE-862 5.2 Medium 2026-02-10
CVE-2026-23689 Denial of service (DOS) in SAP Supply Chain Management — SAP Supply Chain Management CWE-606 7.7 High 2026-02-10
CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) — SAP Fiori App (Manage Service Entry Sheets - Lean Services) CWE-862 4.3 Medium 2026-02-10
CVE-2026-23687 XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform — SAP NetWeaver AS ABAP and ABAP Platform CWE-347 8.8 High 2026-02-10
CVE-2026-23686 CRLF Injection vulnerability in SAP NetWeaver Application Server Java — SAP NetWeaver Application Server Java CWE-113 3.4 Low 2026-02-10
CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) — SAP NetWeaver (JMS service) CWE-502 4.4 Medium 2026-02-10
CVE-2026-23684 Race condition vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-366 5.9 Medium 2026-02-10
CVE-2026-23681 Missing Authorization check in a function module in SAP Support Tools Plug-In — SAP Support Tools Plug-In CWE-862 4.3 Medium 2026-02-10
CVE-2026-0509 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-862 9.6 Critical 2026-02-10
CVE-2026-0508 Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform CWE-601 7.3 High 2026-02-10
CVE-2026-0505 Multiple vulnerabilities in BSP Applications of SAP Document Management System — SAP Document Management System CWE-79 6.1 Medium 2026-02-10
CVE-2026-0490 Denial of service (DOS) in SAP BusinessObjects BI Platform — SAP BusinessObjects BI Platform CWE-862 7.5 High 2026-02-10
CVE-2026-0488 Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) — SAP CRM and SAP S/4HANA (Scripting Editor) CWE-862 9.9 Critical 2026-02-10
CVE-2026-0486 Missing Authorization Check in ABAP based SAP systems — ABAP based SAP systems CWE-862 5.0 Medium 2026-02-10
CVE-2026-0485 Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform — SAP BusinessObjects BI Platform CWE-405 7.5 High 2026-02-10
CVE-2026-0484 Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA — SAP NetWeaver Application Server ABAP and SAP S/4HANA CWE-601 6.5 Medium 2026-02-10
CVE-2026-23683 Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation) CWE-862 4.3 Medium 2026-01-27
CVE-2026-0514 Cross-Site Scripting (XSS) vulnerability in SAP Business Connector — SAP Business Connector CWE-79 6.1 Medium 2026-01-13
CVE-2026-0513 Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) — SAP Supplier Relationship Management (SICF Handler in SRM Catalog) CWE-601 4.7 Medium 2026-01-13
CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation) CWE-862 8.1 High 2026-01-13
CVE-2026-0510 Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping — NW AS Java UME User Mapping CWE-326 3.0 Low 2026-01-13
CVE-2026-0507 OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK — SAP Application Server for ABAP and SAP NetWeaver RFCSDK CWE-78 8.4 High 2026-01-13

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.