Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 644

Browse all 644 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

Found 12 results / 644 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-66779 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-79 6.3 Medium 2026-08-11
CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-787 9.9 Critical 2026-07-14
CVE-2026-27680 CSS Injection vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-276 3.1 Low 2026-05-14
CVE-2026-34257 Open Redirect vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-601 6.1 Medium 2026-04-14
CVE-2025-42945 HTML Injection vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-94 6.1 Medium 2025-08-12
CVE-2025-42981 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-601 6.1 Medium 2025-07-08
CVE-2025-23186 Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-94 8.5 High 2025-04-08
CVE-2025-25242 Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-79 6.1 Medium 2025-03-11
CVE-2025-0068 Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-862 4.3 Medium 2025-01-14
CVE-2024-54198 Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-914 8.5 High 2024-12-10
CVE-2024-47593 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP 4.3 Medium 2024-11-12
CVE-2024-41732 Improper Access Control in SAP Netweaver Application Server ABAP — SAP NetWeaver Application Server ABAP CWE-284 4.7 Medium 2024-08-13

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.