SAP_SE 厂商相关 623 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-32115 | SAP MDS COMPARE TOOL SQL注入漏洞 — Master Data Synchronization (MDS COMPARE TOOL) CWE-89 | 4.2 | Medium | 2023-06-13 |
| CVE-2023-32114 | SAP NetWeaver 资源管理错误漏洞 — SAP NetWeaver (Change and Transport System) CWE-732 | 2.7 | Low | 2023-06-13 |
| CVE-2023-2827 | Web和ecto 访问控制错误漏洞 — SAP Plant Connectivity CWE-306 | 7.9 | High | 2023-06-13 |
| CVE-2023-32112 | SAP Vendor Master Hierarchy 安全漏洞 — Vendor Master Hierarchy CWE-862 | 2.8 | Low | 2023-05-09 |
| CVE-2023-32113 | SAP GUI 信息泄露漏洞 — SAP GUI for Windows CWE-200 | 7.5 | High | 2023-05-09 |
| CVE-2023-32111 | SAP PowerDesigner 缓冲区错误漏洞 — SAP PowerDesigner (Proxy) CWE-787 | 7.5 | High | 2023-05-09 |
| CVE-2023-31407 | SAP Business Planning and Consolidation 跨站脚本漏洞 — SAP Business Planning and Consolidation CWE-79 | 5.4 | Medium | 2023-05-09 |
| CVE-2023-31406 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-79 | 6.1 | Medium | 2023-05-09 |
| CVE-2023-31404 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Central Management Service) CWE-200 | 5.0 | Medium | 2023-05-09 |
| CVE-2023-30744 | SAP NetWeaver Application Server Java 访问控制错误漏洞 — SAP AS NetWeaver JAVA CWE-306 | 8.2 | High | 2023-05-09 |
| CVE-2023-30743 | SAP SAPUI5 跨站脚本漏洞 — SAPUI5 CWE-79 | 7.1 | High | 2023-05-09 |
| CVE-2023-30742 | SAP CRM 跨站脚本漏洞 — SAP CRM (WebClient UI) CWE-79 | 6.1 | Medium | 2023-05-09 |
| CVE-2023-30741 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-79 | 6.1 | Medium | 2023-05-09 |
| CVE-2023-30740 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-200 | 6.3 | Medium | 2023-05-09 |
| CVE-2023-29188 | SAP CRM 跨站脚本漏洞 — SAP CRM WebClient UI CWE-79 | 5.4 | Medium | 2023-05-09 |
| CVE-2023-28764 | SAP BusinessObjects Platform 安全漏洞 — SAP BusinessObjects Platform CWE-522 | 3.7 | Low | 2023-05-09 |
| CVE-2023-28762 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Intelligence Platform CWE-200 | 9.1 | Critical | 2023-05-09 |
| CVE-2023-27499 | SAP GUI 跨站脚本漏洞 — GUI for HTML CWE-79 | 6.1 | Medium | 2023-04-11 |
| CVE-2023-0021 | SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver CWE-79 | 6.1 | Medium | 2023-03-14 |
| CVE-2023-23858 | SAP NetWeaver AS 跨站脚本漏洞 — SAP NetWeaver AS for ABAP and ABAP Platform CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-23856 | SAP BusinessObjects Business Intelligence 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence (Web Intelligence UI) CWE-79 | 4.3 | Medium | 2023-02-14 |
| CVE-2023-0020 | SAP BusinessObjects Business Intelligence 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-200 | 8.5 | High | 2023-02-14 |
| CVE-2023-0019 | SAP GRC 安全漏洞 — SAP GRC (Process Control) CWE-862 | 6.5 | Medium | 2023-02-14 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 623 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。