SAP_SE 厂商相关 644 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-42947 | SAP FICA ODN framework 代码注入漏洞 — SAP FICA ODN framework CWE-94 | 5.5 | Medium | 2025-07-23 |
| CVE-2025-43001 | SAP SAPCAR 安全漏洞 — SAPCAR CWE-266 | 6.9 | Medium | 2025-07-08 |
| CVE-2025-42992 | SAP SAPCAR 安全漏洞 — SAPCAR CWE-266 | 6.9 | Medium | 2025-07-08 |
| CVE-2025-42986 | SAP NetWeaver和SAP ABAP Platform 安全漏洞 — SAP NetWeaver and ABAP Platform CWE-862 | 4.3 | Medium | 2025-07-08 |
| CVE-2025-42985 | SAP BusinessObjects Content Administrator Workbench 输入验证错误漏洞 — SAP BusinessObjects Content Administrator workbench CWE-601 | 6.1 | Medium | 2025-07-08 |
| CVE-2025-42981 | SAP NetWeaver Application Server ABAP 输入验证错误漏洞 — SAP NetWeaver Application Server ABAP CWE-601 | 6.1 | Medium | 2025-07-08 |
| CVE-2025-42980 | SAP NetWeaver Enterprise Portal Federated Portal Network 代码问题漏洞 — SAP NetWeaver Enterprise Portal Federated Portal Network CWE-502 | 9.1 | Critical | 2025-07-08 |
| CVE-2025-42979 | SAP GUI for Windows 安全漏洞 — SAP GUI for Windows CWE-922 | 5.6 | Medium | 2025-07-08 |
| CVE-2025-42978 | SAP NetWeaver Application Server Java 安全漏洞 — SAP NetWeaver Application Server Java CWE-940 | 3.5 | Low | 2025-07-08 |
| CVE-2025-42974 | SAP NetWeaver 安全漏洞 — SAP NetWeaver and ABAP Platform (SDCCN) CWE-862 | 4.3 | Medium | 2025-07-08 |
| CVE-2025-42973 | SAP Data Services Management Console 跨站脚本漏洞 — SAP Data Services (DQ Report) CWE-79 | 5.4 | Medium | 2025-07-08 |
| CVE-2025-42971 | SAP SAPCAR 缓冲区错误漏洞 — SAPCAR CWE-787 | 4.0 | Medium | 2025-07-08 |
| CVE-2025-42970 | SAP SAPCAR 路径遍历漏洞 — SAPCAR CWE-22 | 5.8 | Medium | 2025-07-08 |
| CVE-2025-42969 | SAP NetWeaver Application Server ABAP和SAP ABAP Platform 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-79 | 6.1 | Medium | 2025-07-08 |
| CVE-2025-42968 | SAP NetWeaver 安全漏洞 — SAP NetWeaver (RFC enabled function module) CWE-862 | 5.0 | Medium | 2025-07-08 |
| CVE-2025-42967 | SAP S/4HANA 安全漏洞 — SAP S/4HANA and SAP SCM (Characteristic Propagation) CWE-94 | 9.9 | Critical | 2025-07-08 |
| CVE-2025-42966 | SAP NetWeaver 代码问题漏洞 — SAP NetWeaver (XML Data Archiving Service) CWE-502 | 9.1 | Critical | 2025-07-08 |
| CVE-2025-42965 | SAP CMC Promotion Management 代码问题漏洞 — SAP BusinessObjects BI Platform Central Management Console Promotion Management Application CWE-918 | 4.1 | Medium | 2025-07-08 |
| CVE-2025-42964 | SAP NetWeaver Enterprise Portal Administration 代码问题漏洞 — SAP NetWeaver Enterprise Portal Administration CWE-502 | 9.1 | Critical | 2025-07-08 |
| CVE-2025-42963 | SAP NetWeaver Application Server for Java 代码问题漏洞 — SAP NetWeaver Application Server for Java (Log Viewer ) CWE-502 | 9.1 | Critical | 2025-07-08 |
| CVE-2025-42962 | SAP Business Warehouse 跨站脚本漏洞 — SAP Business Warehouse (Business Explorer Web 3.5 loading animation) CWE-79 | 6.1 | Medium | 2025-07-08 |
| CVE-2025-42961 | SAP NetWeaver Application Server ABAP 安全漏洞 — SAP NetWeaver Application Server for ABAP CWE-862 | 4.9 | Medium | 2025-07-08 |
| CVE-2025-42960 | SAP Business Warehouse和SAP BW/4HANA BEx Tools 安全漏洞 — SAP Business Warehouse and SAP BW/4HANA BEx Tools CWE-862 | 4.3 | Medium | 2025-07-08 |
| CVE-2025-42959 | SAP NetWeaver ABAP Server和SAP ABAP Platform 安全漏洞 — SAP NetWeaver ABAP Server and ABAP Platform CWE-308 | 8.1 | High | 2025-07-08 |
| CVE-2025-42954 | SAP NetWeaver Business Warehouse 安全漏洞 — SAP NetWeaver Business Warehouse (CCAW application) CWE-835 | 2.7 | Low | 2025-07-08 |
| CVE-2025-42953 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for ABAP CWE-862 | 8.1 | High | 2025-07-08 |
| CVE-2025-42952 | SAP Business Warehouse和SAP Plug-In Basis 安全漏洞 — SAP Business Warehouse and SAP Plug-In Basis CWE-862 | 7.7 | High | 2025-07-08 |
| CVE-2025-31326 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (Web Intelligence) CWE-80 | 4.1 | Medium | 2025-07-08 |
| CVE-2025-42998 | SAP Business One Integration Framework 访问控制错误漏洞 — SAP Business One Integration Framework CWE-346 | 5.3 | Medium | 2025-06-10 |
| CVE-2025-42996 | SAP MDM Server 安全漏洞 — SAP MDM Server CWE-590 | 5.6 | Medium | 2025-06-10 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。