SAP_SE 厂商相关 644 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商,其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本,常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商,其系统稳定性与数据完整性对众多大型企业至关重要,需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-0506 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-862 | 8.1 | High | 2026-01-13 |
| CVE-2026-0504 | SAP Identity Management 安全漏洞 — SAP Identity Management CWE-943 | 3.8 | Low | 2026-01-13 |
| CVE-2026-0503 | SAP ERP Central Component 安全漏洞 — SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) CWE-862 | 6.4 | Medium | 2026-01-13 |
| CVE-2026-0501 | SAP S/4HANA Private Cloud and On-Premise SQL注入漏洞 — SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger) CWE-89 | 9.9 | Critical | 2026-01-13 |
| CVE-2026-0500 | SAP Wily Introscope Enterprise Manager 代码注入漏洞 — SAP Wily Introscope Enterprise Manager (WorkStation) CWE-94 | 9.6 | Critical | 2026-01-13 |
| CVE-2026-0499 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 6.1 | Medium | 2026-01-13 |
| CVE-2026-0498 | SAP S/4HANA 代码注入漏洞 — SAP S/4HANA (Private Cloud and On-Premise) CWE-94 | 9.1 | Critical | 2026-01-13 |
| CVE-2026-0497 | SAP Product Designer Web UI of Business Server 安全漏洞 — Business Server Pages Application (Product Designer Web UI) CWE-862 | 4.3 | Medium | 2026-01-13 |
| CVE-2026-0496 | SAP Fiori App Intercompany Balance Reconciliation 代码问题漏洞 — SAP Fiori App (Intercompany Balance Reconciliation) CWE-434 | 6.6 | Medium | 2026-01-13 |
| CVE-2026-0495 | SAP Fiori App Intercompany Balance Reconciliation 安全漏洞 — SAP Fiori App (Intercompany Balance Reconciliation) CWE-15 | 5.1 | Medium | 2026-01-13 |
| CVE-2026-0494 | SAP Fiori App Intercompany Balance Reconciliation 安全漏洞 — SAP Fiori App (Intercompany Balance Reconciliation) CWE-497 | 4.3 | Medium | 2026-01-13 |
| CVE-2026-0493 | SAP Fiori App Intercompany Balance Reconciliation 跨站请求伪造漏洞 — SAP Fiori App (Intercompany Balance Reconciliation) CWE-352 | 4.3 | Medium | 2026-01-13 |
| CVE-2026-0492 | SAP HANA 访问控制错误漏洞 — SAP HANA database CWE-306 | 8.8 | High | 2026-01-13 |
| CVE-2026-0491 | SAP Landscape Transformation 代码注入漏洞 — SAP Landscape Transformation CWE-94 | 9.1 | Critical | 2026-01-13 |
| CVE-2025-42928 | SAP jConnect 代码问题漏洞 — SAP jConnect - SDK for ASE CWE-502 | 9.1 | Critical | 2025-12-09 |
| CVE-2025-42904 | SAP Application Server for ABAP 安全漏洞 — Application Server ABAP CWE-549 | 6.5 | Medium | 2025-12-09 |
| CVE-2025-42896 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence Platform CWE-116 | 5.4 | Medium | 2025-12-09 |
| CVE-2025-42891 | SAP Application Server for ABAP 安全漏洞 — SAP Enterprise Search for ABAP CWE-862 | 5.5 | Medium | 2025-12-09 |
| CVE-2025-42880 | SAP Solution Manager 代码注入漏洞 — SAP Solution Manager CWE-94 | 9.9 | Critical | 2025-12-09 |
| CVE-2025-42878 | SAP Web Dispatcher和SAP Internet Communication Manager 安全漏洞 — SAP Web Dispatcher and Internet Communication Manager (ICM) CWE-1244 | 8.2 | High | 2025-12-09 |
| CVE-2025-42877 | SAP多款产品 缓冲区错误漏洞 — SAP Web Dispatcher, Internet Communication Manager and SAP Content Server CWE-787 | 7.5 | High | 2025-12-09 |
| CVE-2025-42876 | SAP S/4 HANA 安全漏洞 — SAP S/4 HANA Private Cloud (Financials General Ledger) CWE-405 | 7.1 | High | 2025-12-09 |
| CVE-2025-42875 | SAP Internet Communication Framework 访问控制错误漏洞 — SAP NetWeaver Internet Communication Framework CWE-306 | 6.6 | Medium | 2025-12-09 |
| CVE-2025-42874 | SAP NetWeaver 安全漏洞 — SAP NetWeaver (remote service for Xcelsius) CWE-405 | 7.9 | High | 2025-12-09 |
| CVE-2025-42873 | SAP SAPUI5 安全漏洞 — SAPUI5 framework (Markdown-it component) CWE-405 | 5.9 | Medium | 2025-12-09 |
| CVE-2025-42872 | SAP NetWeaver Enterprise Portal 安全漏洞 — SAP NetWeaver Enterprise Portal CWE-489 | 6.1 | Medium | 2025-12-09 |
| CVE-2025-42940 | SAP CommonCryptoLib 缓冲区错误漏洞 — SAP CommonCryptoLib CWE-787 | 7.5 | High | 2025-11-11 |
| CVE-2025-42924 | SAP S/4HANA 输入验证错误漏洞 — SAP S/4HANA landscape (SAP E-Recruiting BSP) CWE-601 | 6.1 | Medium | 2025-11-11 |
| CVE-2025-42919 | SAP NetWeaver Application Server Java 路径遍历漏洞 — SAP NetWeaver Application Server Java CWE-22 | 5.3 | Medium | 2025-11-11 |
| CVE-2025-42899 | SAP S4CORE 安全漏洞 — SAP S4CORE (Manage Journal Entries) CWE-862 | 4.3 | Medium | 2025-11-11 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 644 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。