SAP_SE 厂商相关 644 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-30011 | SAP Supplier Relationship Management 安全漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-497 | 5.3 | Medium | 2025-05-13 |
| CVE-2025-30010 | SAP Supplier Relationship Management 输入验证错误漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-601 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-30009 | SAP Supplier Relationship Management 跨站脚本漏洞 — SAP Supplier Relationship Management (Live Auction Cockpit) CWE-79 | 6.1 | Medium | 2025-05-13 |
| CVE-2025-26662 | SAP Data Services Management Console 跨站脚本漏洞 — SAP Data Services Management Console CWE-79 | 4.4 | Medium | 2025-05-13 |
| CVE-2025-31324 | SAP NetWeaver Visual Composer Metadata Uploader 代码问题漏洞 — SAP NetWeaver (Visual Composer development server) CWE-434 | 10.0 | Critical | 2025-04-24 |
| CVE-2025-31328 | SAP Learning Solution 跨站请求伪造漏洞 — SAP S/4 HANA (Learning Solution) CWE-352 | 4.6 | Medium | 2025-04-22 |
| CVE-2025-31327 | SAP Field Logistics Manage Logistics 安全漏洞 — SAP Field Logistics CWE-472 | 4.3 | Medium | 2025-04-22 |
| CVE-2025-31333 | SAP S4CORE 安全漏洞 — SAP S4CORE entity CWE-472 | 4.3 | Medium | 2025-04-08 |
| CVE-2025-31332 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-277 | 6.6 | Medium | 2025-04-08 |
| CVE-2025-31331 | SAP NetWeaver 安全漏洞 — SAP NetWeaver CWE-863 | 4.3 | Medium | 2025-04-08 |
| CVE-2025-31330 | SAP Landscape Transformation 代码注入漏洞 — SAP Landscape Transformation (Analysis Platform) CWE-94 | 9.9 | Critical | 2025-04-08 |
| CVE-2025-30017 | SAP Solution Manager 安全漏洞 — SAP Solution Manager CWE-862 | 4.4 | Medium | 2025-04-08 |
| CVE-2025-30016 | SAP Financial Consolidation 安全漏洞 — SAP Financial Consolidation CWE-921 | 9.8 | Critical | 2025-04-08 |
| CVE-2025-30015 | SAP NetWeaver 缓冲区错误漏洞 — SAP NetWeaver and ABAP Platform (Application Server ABAP) CWE-787 | 4.1 | Medium | 2025-04-08 |
| CVE-2025-30014 | SAP Capital Yield Tax Management 安全漏洞 — SAP Capital Yield Tax Management CWE-35 | 7.7 | High | 2025-04-08 |
| CVE-2025-30013 | SAP ERP BW Business Content 代码注入漏洞 — SAP ERP BW Business Content CWE-94 | 6.7 | Medium | 2025-04-08 |
| CVE-2025-27437 | SAP NetWeaver Server ABAP 安全漏洞 — SAP NetWeaver Application Server ABAP (Virus Scan Interface) CWE-862 | 4.3 | Medium | 2025-04-08 |
| CVE-2025-27435 | SAP Commerce 安全漏洞 — SAP Commerce Cloud CWE-862 | 4.2 | Medium | 2025-04-08 |
| CVE-2025-27429 | SAP S/4HANA 代码注入漏洞 — SAP S/4HANA (Private Cloud) CWE-94 | 9.9 | Critical | 2025-04-08 |
| CVE-2025-27428 | SAP Solution Manager 安全漏洞 — SAP NetWeaver and ABAP Platform (Service Data Collection) CWE-862 | 7.7 | High | 2025-04-08 |
| CVE-2025-26657 | SAP KMC WPC 安全漏洞 — SAP KMC WPC CWE-862 | 5.3 | Medium | 2025-04-08 |
| CVE-2025-26654 | SAP Commerce Cloud 安全漏洞 — SAP Commerce Cloud (Public Cloud) CWE-319 | 6.8 | Medium | 2025-04-08 |
| CVE-2025-26653 | SAP NetWeaver Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) CWE-79 | 4.7 | Medium | 2025-04-08 |
| CVE-2025-23186 | SAP NetWeaver Application Server 代码注入漏洞 — SAP NetWeaver Application Server ABAP CWE-94 | 8.5 | High | 2025-04-08 |
| CVE-2025-27436 | SAP S4 HANA 安全漏洞 — SAP S/4HANA (Manage Bank Statements) CWE-639 | 4.3 | Medium | 2025-03-11 |
| CVE-2025-27434 | SAP Commerce 跨站脚本漏洞 — SAP Commerce (Swagger UI) CWE-79 | 8.8 | High | 2025-03-11 |
| CVE-2025-27433 | SAP S/4HANA 安全漏洞 — SAP S/4HANA (Manage Bank Statements) CWE-639 | 4.3 | Medium | 2025-03-11 |
| CVE-2025-27432 | SAP Electronic Invoicing 安全漏洞 — SAP Electronic Invoicing for Brazil (eDocument Cockpit) CWE-862 | 2.4 | Low | 2025-03-11 |
| CVE-2025-27431 | SAP NetWeaver Application Server Java 跨站脚本漏洞 — SAP NetWeaver Application Server Java CWE-79 | 5.4 | Medium | 2025-03-11 |
| CVE-2025-27430 | SAP CRM和SAP S/4HANA 代码问题漏洞 — SAP CRM and SAP S/4HANA (Interaction Center) CWE-918 | 3.5 | Low | 2025-03-11 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。