Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2025-42897 Information Disclosure vulnerability in SAP Business One (SLD) — SAP Business One (SLD) CWE-522 5.3 Medium 2025-11-11
CVE-2025-42895 Code Injection vulnerability in SAP HANA JDBC Client — SAP HANA JDBC Client CWE-94 6.9 Medium 2025-11-11
CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector — SAP Business Connector CWE-22 6.8 Medium 2025-11-11
CVE-2025-42893 Open Redirect vulnerability in SAP Business Connector — SAP Business Connector CWE-601 6.1 Medium 2025-11-11
CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector — SAP Business Connector CWE-78 6.8 Medium 2025-11-11
CVE-2025-42890 Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui) — SQL Anywhere Monitor (Non-Gui) CWE-798 10.0 Critical 2025-11-11
CVE-2025-42889 SQL Injection vulnerability in SAP Starter Solution (PL SAFT) — SAP Starter Solution (PL SAFT) CWE-89 5.4 Medium 2025-11-11
CVE-2025-42888 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for Windows CWE-316 5.5 Medium 2025-11-11
CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager — SAP Solution Manager CWE-94 9.9 Critical 2025-11-11
CVE-2025-42886 Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector — SAP Business Connector CWE-79 6.1 Medium 2025-11-11
CVE-2025-42885 Missing authentication in SAP HANA 2.0 (hdbrss) — SAP HANA 2.0 (hdbrss) CWE-306 5.8 Medium 2025-11-11
CVE-2025-42884 JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise Portal CWE-943 6.5 Medium 2025-11-11
CVE-2025-42883 Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) — SAP NetWeaver Application Server for ABAP (Migration Workbench) CWE-434 2.7 Low 2025-11-11
CVE-2025-42882 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-862 4.3 Medium 2025-11-11
CVE-2025-42939 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements) — SAP S/4HANA (Manage Processing Rules - For Bank Statements) CWE-863 4.3 Medium 2025-10-14
CVE-2025-42937 Directory Traversal vulnerability in SAP Print Service — SAP Print Service CWE-35 9.8 Critical 2025-10-14
CVE-2025-42910 Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management — SAP Supplier Relationship Management CWE-434 9.0 Critical 2025-10-14
CVE-2025-42909 Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances — SAP Cloud Appliance Library Appliances CWE-1004 3.0 Low 2025-10-14
CVE-2025-42908 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-352 5.4 Medium 2025-10-14
CVE-2025-42906 Directory Traversal vulnerability in SAP Commerce Cloud — SAP Commerce Cloud CWE-22 5.3 Medium 2025-10-14
CVE-2025-42903 User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management — SAP Financial Service Claims Management CWE-204 4.3 Medium 2025-10-14
CVE-2025-42902 Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform — SAP Netweaver AS ABAP and ABAP Platform CWE-476 5.3 Medium 2025-10-14
CVE-2025-42901 Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser) — SAP Application Server for ABAP (BAPI Browser) CWE-94 5.4 Medium 2025-10-14
CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform — SAP BI Platform CWE-918 4.3 Medium 2025-09-23
CVE-2025-42958 Missing Authentication check in SAP NetWeaver — SAP NetWeaver CWE-250 9.1 Critical 2025-09-09
CVE-2025-42944 Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4) — SAP Netweaver (RMI-P4) CWE-502 10.0 Critical 2025-09-09
CVE-2025-42938 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform — SAP NetWeaver ABAP Platform CWE-79 6.1 Medium 2025-09-09
CVE-2025-42933 Insecure Storage of Sensitive Information in SAP Business One (SLD) — SAP Business One (SLD) CWE-522 8.8 High 2025-09-09
CVE-2025-42930 Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation — SAP Business Planning and Consolidation CWE-606 6.5 Medium 2025-09-09
CVE-2025-42929 Missing input validation vulnerability in SAP Landscape Transformation Replication Server — SAP Landscape Transformation Replication Server CWE-1287 8.1 High 2025-09-09

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.