SAP_SE 厂商相关 644 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-40310 | SAP PowerDesigner 安全漏洞 — SAP PowerDesigner Client CWE-112 | 6.5 | Medium | 2023-10-10 |
| CVE-2023-40309 | SAP CommonCryptoLib和abu 安全漏洞 — SAP CommonCryptoLib CWE-863 | 9.8 | Critical | 2023-09-12 |
| CVE-2023-40621 | SAP PowerDesigner 代码注入漏洞 — SAP PowerDesigner Client CWE-94 | 6.3 | Medium | 2023-09-12 |
| CVE-2023-40622 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Promotion Management) CWE-732 | 9.9 | Critical | 2023-09-12 |
| CVE-2023-40623 | SAP BusinessObjects Suite Installer 安全漏洞 — SAP BusinessObjects Suite (Installer) CWE-1386 | 6.2 | Medium | 2023-09-12 |
| CVE-2023-40624 | SAP NetWeaver AS 跨站脚本漏洞 — SAP NetWeaver AS ABAP (applications based on Unified Rendering) CWE-79 | 5.5 | Medium | 2023-09-12 |
| CVE-2023-40625 | SAP S4CORE 安全漏洞 — SAP Manage Purchase Contracts App CWE-862 | 5.4 | Medium | 2023-09-12 |
| CVE-2023-41367 | SAP NetWeaver 访问控制错误漏洞 — SAP NetWeaver (Guided Procedures) CWE-306 | 5.3 | Medium | 2023-09-12 |
| CVE-2023-41368 | SAP S4 HANA 安全漏洞 — S4 HANA ABAP (Manage checkbook apps) CWE-639 | 2.7 | Low | 2023-09-12 |
| CVE-2023-41369 | SAP S/4HANA 代码问题漏洞 — SAP S/4HANA (Create Single Payment application) CWE-611 | 3.5 | Low | 2023-09-12 |
| CVE-2023-42472 | SAP BusinessObjects Business Intelligence Platform 代码问题漏洞 — SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) CWE-434 | 8.7 | High | 2023-09-12 |
| CVE-2023-40308 | SAP CommonCryptoLib 代码问题漏洞 — SAP CommonCryptoLib CWE-787 | 7.5 | High | 2023-09-12 |
| CVE-2023-37489 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform (Version Management System) CWE-209 | 5.3 | Medium | 2023-09-12 |
| CVE-2023-39438 | Contributor License Agreement assistant 安全漏洞 — CLA Assistant CWE-862 | 8.1 | High | 2023-08-15 |
| CVE-2023-37486 | SAP Commerce 信息泄露漏洞 — SAP Commerce (OCC API) CWE-524 | 5.9 | Medium | 2023-08-08 |
| CVE-2023-39440 | SAP BusinessObjects Business Intelligence 信息泄露漏洞 — SAP BusinessObjects Business Intelligence CWE-312 | 4.4 | Medium | 2023-08-08 |
| CVE-2023-39439 | SAP Commerce 安全漏洞 — SAP Commerce CWE-258 | 8.8 | High | 2023-08-08 |
| CVE-2023-39437 | SAP business One allows 跨站脚本漏洞 — SAP Business One CWE-79 | 7.6 | High | 2023-08-08 |
| CVE-2023-39436 | SAP Supplier Relationship Management 信息泄露漏洞 — SAP Supplier Relationship Management CWE-306 | 5.8 | Medium | 2023-08-08 |
| CVE-2023-37492 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver AS ABAP and ABAP Platform CWE-863 | 4.9 | Medium | 2023-08-08 |
| CVE-2023-37491 | SAP Message Server 授权问题漏洞 — SAP Message Server CWE-863 | 7.5 | High | 2023-08-08 |
| CVE-2023-37490 | SAP Business Objects 代码问题漏洞 — SAP BusinessObjects Business Intelligence (Installer) CWE-427 | 7.6 | High | 2023-08-08 |
| CVE-2023-37488 | SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver Process Integration CWE-79 | 6.1 | Medium | 2023-08-08 |
| CVE-2023-37487 | SAP Business One 信息泄露漏洞 — SAP Business One (Service Layer) CWE-497 | 5.3 | Medium | 2023-08-08 |
| CVE-2023-37484 | SAP PowerDesigner 信息泄露漏洞 — SAP PowerDesigner CWE-327 | 5.3 | Medium | 2023-08-08 |
| CVE-2023-37483 | SAP PowerDesigner 访问控制错误漏洞 — SAP PowerDesigner CWE-306 | 9.8 | Critical | 2023-08-08 |
| CVE-2023-36926 | SAP Host Agent 授权问题漏洞 — SAP Host Agent CWE-306 | 3.7 | Low | 2023-08-08 |
| CVE-2023-36923 | SAP PowerDesigner 代码注入漏洞 — SAP PowerDesigner CWE-94 | 7.8 | High | 2023-08-08 |
| CVE-2023-33993 | SAP Business One SQL注入漏洞 — SAP Business One (B1i Layer) CWE-89 | 7.1 | High | 2023-08-08 |
| CVE-2023-36925 | SAP Solution Manager 代码问题漏洞 — SAP Solution Manager (Diagnostics agent) CWE-918 | 7.2 | High | 2023-07-11 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。