SAP_SE 厂商相关 644 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商，其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本，常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商，其系统稳定性与数据完整性对众多大型企业至关重要，需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-36924 | SAP ERP 安全漏洞 — SAP ERP Defense Forces and Public Security CWE-117 | 4.9 | Medium | 2023-07-11 |
| CVE-2023-36922 | SAP NetWeaver ABAP Server 操作系统命令注入漏洞 — SAP ECC and SAP S/4HANA (IS-OIL) CWE-78 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36921 | SAP Solution Manager 安全漏洞 — SAP Solution Manager (Diagnostic Agent) CWE-644 | 7.2 | High | 2023-07-11 |
| CVE-2023-36919 | SAP Enable Now 安全漏洞 — SAP Enable Now CWE-213 | 5.3 | Medium | 2023-07-11 |
| CVE-2023-36918 | SAP Enable Now 跨站脚本漏洞 — SAP Enable Now CWE-79 | 6.1 | Medium | 2023-07-11 |
| CVE-2023-36917 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-307 | 5.9 | Medium | 2023-07-11 |
| CVE-2023-35874 | SAP NetWeaver Application Server 授权问题漏洞 — SAP NetWeaver AS ABAP and ABAP Platform CWE-306 | 6.0 | Medium | 2023-07-11 |
| CVE-2023-35873 | SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Runtime Workbench) CWE-306 | 6.5 | Medium | 2023-07-11 |
| CVE-2023-35872 | SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Message Display Tool) CWE-306 | 6.5 | Medium | 2023-07-11 |
| CVE-2023-35871 | SAP Web Dispatcher 缓冲区错误漏洞 — SAP Web Dispatcher CWE-787 | 7.7 | High | 2023-07-11 |
| CVE-2023-35870 | SAP S/4HANA 安全漏洞 — SAP S/4HANA (Manage Journal Entry Template) CWE-732 | 6.3 | Medium | 2023-07-11 |
| CVE-2023-33992 | SAP BW/4HANA 安全漏洞 — SAP Business Warehouse and SAP BW/4HANA CWE-862 | 4.5 | Medium | 2023-07-11 |
| CVE-2023-33990 | SAP SQL Anywhere 安全漏洞 — SAP SQL Anywhere CWE-732 | 7.8 | High | 2023-07-11 |
| CVE-2023-33989 | SAP NetWeaver 路径遍历漏洞 — SAP NetWeaver (BI CONT ADD ON) CWE-22 | 8.7 | High | 2023-07-11 |
| CVE-2023-33988 | SAP Enable Now 跨站脚本漏洞 — SAP Enable Now CWE-79 | 6.1 | Medium | 2023-07-11 |
| CVE-2023-33987 | SAP Web Dispatcher 环境问题漏洞 — SAP Web Dispatcher CWE-444 | 8.6 | High | 2023-07-11 |
| CVE-2023-31405 | SAP NetWeaver 安全漏洞 — SAP NetWeaver AS for Java (Log Viewer) CWE-117 | 5.3 | Medium | 2023-07-11 |
| CVE-2023-33991 | SAP Variant Management 跨站脚本漏洞 — SAP UI5 Variant Management CWE-79 | 8.2 | High | 2023-06-13 |
| CVE-2023-33986 | SAP CRM 跨站脚本漏洞 — SAP CRM ABAP (Grantor Management) CWE-79 | 6.1 | Medium | 2023-06-13 |
| CVE-2023-33985 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | Medium | 2023-06-13 |
| CVE-2023-33984 | SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver (Design Time Repository) CWE-79 | 6.4 | Medium | 2023-06-13 |
| CVE-2023-32115 | SAP MDS COMPARE TOOL SQL注入漏洞 — Master Data Synchronization (MDS COMPARE TOOL) CWE-89 | 4.2 | Medium | 2023-06-13 |
| CVE-2023-32114 | SAP NetWeaver 资源管理错误漏洞 — SAP NetWeaver (Change and Transport System) CWE-732 | 2.7 | Low | 2023-06-13 |
| CVE-2023-2827 | Web和ecto 访问控制错误漏洞 — SAP Plant Connectivity CWE-306 | 7.9 | High | 2023-06-13 |
| CVE-2023-32112 | SAP Vendor Master Hierarchy 安全漏洞 — Vendor Master Hierarchy CWE-862 | 2.8 | Low | 2023-05-09 |
| CVE-2023-32113 | SAP GUI 信息泄露漏洞 — SAP GUI for Windows CWE-200 | 7.5 | High | 2023-05-09 |
| CVE-2023-32111 | SAP PowerDesigner 缓冲区错误漏洞 — SAP PowerDesigner (Proxy) CWE-787 | 7.5 | High | 2023-05-09 |
| CVE-2023-31407 | SAP Business Planning and Consolidation 跨站脚本漏洞 — SAP Business Planning and Consolidation CWE-79 | 5.4 | Medium | 2023-05-09 |
| CVE-2023-31406 | SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-79 | 6.1 | Medium | 2023-05-09 |
| CVE-2023-31404 | SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞 — SAP BusinessObjects Business Intelligence Platform (Central Management Service) CWE-200 | 5.0 | Medium | 2023-05-09 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。