Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE ID Title CVSS Severity Published
CVE-2025-42927 Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) — SAP NetWeaver AS Java (Adobe Document Service) CWE-1395 3.4 Low 2025-09-09
CVE-2025-42926 Missing Authentication check in SAP NetWeaver Application Server Java — SAP NetWeaver Application Server Java CWE-306 5.3 Medium 2025-09-09
CVE-2025-42925 Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service) — SAP NetWeaver AS Java (IIOP Service) CWE-341 4.3 Medium 2025-09-09
CVE-2025-42923 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups) — SAP Fiori App (F4044 Manage Work Center Groups) CWE-352 4.3 Medium 2025-09-09
CVE-2025-42922 Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service) — SAP NetWeaver AS Java (Deploy Web Service) CWE-94 9.9 Critical 2025-09-09
CVE-2025-42920 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management — SAP Supplier Relationship Management CWE-79 6.1 Medium 2025-09-09
CVE-2025-42918 Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) — SAP NetWeaver Application Server for ABAP (Background Processing) CWE-862 4.3 Medium 2025-09-09
CVE-2025-42917 Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) — SAP HCM (Approve Timesheets Fiori 2.0 application) CWE-862 6.5 Medium 2025-09-09
CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise) — SAP S/4HANA (Private Cloud or On-Premise) CWE-1287 8.1 High 2025-09-09
CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks) — Fiori app (Manage Payment Blocks) CWE-862 5.4 Medium 2025-09-09
CVE-2025-42914 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) CWE-862 3.1 Low 2025-09-09
CVE-2025-42913 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) CWE-862 3.1 Low 2025-09-09
CVE-2025-42912 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) CWE-862 6.5 Medium 2025-09-09
CVE-2025-42911 Missing Authorization check in SAP NetWeaver (Service Data Download) — SAP NetWeaver (Service Data Download) CWE-862 5.0 Medium 2025-09-09
CVE-2025-42976 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) — SAP NetWeaver Application Server ABAP (BIC Document) CWE-125 8.1 High 2025-08-12
CVE-2025-42975 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) — SAP NetWeaver Application Server ABAP (BIC Document) CWE-79 6.1 Medium 2025-08-12
CVE-2025-42957 Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) — SAP S/4HANA (Private Cloud or On-Premise) CWE-94 9.9 Critical 2025-08-12
CVE-2025-42955 Missing authorization check in SAP Cloud Connector — SAP Cloud Connector CWE-862 3.5 Low 2025-08-12
CVE-2025-42951 Broken Authorization in SAP Business One (SLD) — SAP Business One (SLD) CWE-863 8.8 High 2025-08-12
CVE-2025-42950 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) — SAP Landscape Transformation (Analysis Platform) CWE-94 9.9 Critical 2025-08-12
CVE-2025-42949 Missing Authorization check in ABAP Platform — ABAP Platform CWE-862 4.9 Medium 2025-08-12
CVE-2025-42948 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform — SAP NetWeaver ABAP Platform CWE-79 6.1 Medium 2025-08-12
CVE-2025-42946 Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) — SAP S/4HANA (Bank Communication Management) CWE-22 6.9 Medium 2025-08-12
CVE-2025-42945 HTML Injection vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-94 6.1 Medium 2025-08-12
CVE-2025-42943 Information Disclosure in SAP GUI for Windows — SAP GUI for Windows CWE-250 4.5 Medium 2025-08-12
CVE-2025-42942 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-79 6.1 Medium 2025-08-12
CVE-2025-42941 Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) — SAP Fiori (Launchpad) CWE-1022 3.5 Low 2025-08-12
CVE-2025-42936 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAP CWE-266 5.4 Medium 2025-08-12
CVE-2025-42935 Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) — SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) CWE-532 4.1 Medium 2025-08-12
CVE-2025-42934 CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) — SAP S/4HANA (Supplier invoice) CWE-113 4.3 Medium 2025-08-12

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.