SAP_SE 厂商相关 644 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-42995 | SAP MDM Server 安全漏洞 — SAP MDM Server CWE-590 | 7.5 | High | 2025-06-10 |
| CVE-2025-42994 | 多款产品安全漏洞 — SAP MDM Server CWE-590 | 7.5 | High | 2025-06-10 |
| CVE-2025-42993 | SAP S/4HANA 安全漏洞 — SAP S/4HANA (Enterprise Event Enablement) CWE-862 | 6.7 | Medium | 2025-06-10 |
| CVE-2025-42991 | SAP S/4HANA 安全漏洞 — SAP S/4HANA (Bank Account Application) CWE-862 | 4.3 | Medium | 2025-06-10 |
| CVE-2025-42990 | SAP SAPUI5 跨站脚本漏洞 — SAPUI5 applications CWE-79 | 3.0 | Low | 2025-06-10 |
| CVE-2025-42989 | SAP NetWeaver 安全漏洞 — SAP NetWeaver Application Server for ABAP CWE-862 | 9.6 | Critical | 2025-06-10 |
| CVE-2025-42988 | SAP Business Objects Business Intelligence Platform 代码问题漏洞 — SAP Business Objects Business Intelligence Platform CWE-918 | 3.7 | Low | 2025-06-10 |
| CVE-2025-42987 | SAP Manage Processing Rules 安全漏洞 — SAP S/4HANA (Manage Processing Rules - For Bank Statement) CWE-862 | 4.3 | Medium | 2025-06-10 |
| CVE-2025-42984 | SAP S/4HANA Manage Central Purchase Contract 安全漏洞 — SAP S/4HANA (Manage Central Purchase Contract application) CWE-862 | 5.4 | Medium | 2025-06-10 |
| CVE-2025-42983 | SAP Business Warehouse和SAP Plug-In Basis 安全漏洞 — SAP Business Warehouse and SAP Plug-In Basis CWE-862 | 8.5 | High | 2025-06-10 |
| CVE-2025-42982 | SAP GRC 安全漏洞 — SAP GRC (AC Plugin) CWE-862 | 8.8 | High | 2025-06-10 |
| CVE-2025-42977 | SAP NetWeaver Visual Composer 路径遍历漏洞 — SAP NetWeaver Visual Composer CWE-22 | 7.6 | High | 2025-06-10 |
| CVE-2025-31325 | SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver (ABAP Keyword Documentation) CWE-79 | 5.8 | Medium | 2025-06-10 |
| CVE-2025-23192 | SAP BusinessObjects Business Intelligence 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence (BI Workspace) CWE-79 | 8.2 | High | 2025-06-10 |
| CVE-2025-43011 | SAP Landscape Transformation 安全漏洞 — SAP Landscape Transformation (PCL Basis) CWE-862 | 7.7 | High | 2025-05-13 |
| CVE-2025-43010 | SAP S/4HANA Cloud Private 代码注入漏洞 — SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) CWE-94 | 8.3 | High | 2025-05-13 |
| CVE-2025-43009 | SAP Service Parts Management 安全漏洞 — SAP Service Parts Management (SPM) CWE-862 | 6.3 | Medium | 2025-05-13 |
| CVE-2025-43008 | SAP ERP HCM和SAP S/4HANA 安全漏洞 — SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal CWE-862 | 5.8 | Medium | 2025-05-13 |
| CVE-2025-43007 | SAP Service Parts Management 安全漏洞 — SAP Service Parts Management (SPM) CWE-862 | 6.3 | Medium | 2025-05-13 |
| CVE-2025-43006 | SAP Supplier Relationship Management 跨站脚本漏洞 — SAP Supplier Relationship Management (Master Data Management Catalog) CWE-79 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-43005 | SAP GUI 安全漏洞 — SAP GUI for Windows CWE-256 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-43004 | SAP Digital Manufacturing 安全漏洞 — SAP Digital Manufacturing (Production Operator Dashboard) CWE-862 | 5.3 | Medium | 2025-05-13 |
| CVE-2025-43003 | SAP S/4 HANA 安全漏洞 — SAP S/4HANA (Private Cloud & On-Premise) CWE-749 | 6.4 | Medium | 2025-05-13 |
| CVE-2025-43002 | SAP S4CORE 安全漏洞 — SAP S4/HANA (OData meta-data property) CWE-472 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-43000 | SAP Business Objects Business Intelligence Platform 安全漏洞 — SAP Business Objects Business Intelligence Platform (PMW) CWE-862 | 7.9 | High | 2025-05-13 |
| CVE-2025-42999 | SAP NetWeaver Visual Composer Metadata Uploader 安全漏洞 — SAP NetWeaver (Visual Composer development server) CWE-502 | 9.1 | Critical | 2025-05-13 |
| CVE-2025-42997 | SAP Gateway Client 安全漏洞 — SAP Gateway Client CWE-732 | 6.6 | Medium | 2025-05-13 |
| CVE-2025-31329 | SAP NetWeaver 安全漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-141 | 6.2 | Medium | 2025-05-13 |
| CVE-2025-30018 | SAP Supplier Relationship Management 代码问题漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-611 | 8.6 | High | 2025-05-13 |
| CVE-2025-30012 | SAP Supplier Relationship Management 代码问题漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-502 | 10.0 | Critical | 2025-05-13 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。