Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 570

Browse all 570 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE IDTitleCVSSSeverityPublished
CVE-2026-44767 Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection — @ui5/webcomponents-baseCWE-79 6.1 Medium2026-07-14
CVE-2026-58233 Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach) — SAP Change and Transport System Attach Tool (ctsattach)CWE-502 7.6 High2026-07-14
CVE-2026-44771 Missing Authorization check in SAP S/4HANA (Draft operation) — SAP S/4HANA (Draft operation)CWE-862 4.3 Medium2026-07-14
CVE-2026-44770 Missing Authorization check in SAP S/4 HANA (Create Single Payment) — SAP S/4 HANA (Create Single Payment)CWE-862 4.3 Medium2026-07-14
CVE-2026-44769 SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO) — SAP S/4HANA Project Management (PPM-PRO)CWE-89 5.5 Medium2026-07-14
CVE-2026-44768 Security misconfiguration in SAP CRM (WebClient UI) — SAP CRM (WebClient UI)CWE-15 4.1 Medium2026-07-14
CVE-2026-44761 Insecure Sample Credentials in SAP Commerce Cloud — SAP Commerce CloudCWE-1392 9.1 Critical2026-07-14
CVE-2026-44760 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) — SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)CWE-79 4.7 Medium2026-07-14
CVE-2026-44759 Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise PortalCWE-79 6.1 Medium2026-07-14
CVE-2026-44753 Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service) — SAP HANA Extended Application Services classic model (User Self Service)CWE-204 3.7 Low2026-07-14
CVE-2026-44752 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) — SAP NetWeaver Application Server Java(Configuration Wizard)CWE-79 8.2 High2026-07-14
CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAPCWE-787 9.9 Critical2026-07-14
CVE-2026-44745 Open Redirect vulnerability in SAP Approuter — SAP ApprouterCWE-601 8.1 High2026-07-14
CVE-2026-27690 HTTP Request Smuggling in SAP Approuter — SAP ApprouterCWE-444 9.1 Critical2026-07-14
CVE-2026-0487 DLL Hijacking vulnerability in SAProuter on Microsoft Windows — SAProuter on Microsoft WindowsCWE-427 8.4 High2026-07-14
CVE-2026-44757 Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager — SAP Wily Introscope Enterprise ManagerCWE-79 4.7 Medium2026-06-09
CVE-2026-44755 Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform — SAP Business Objects Business Intelligence PlatformCWE-346 4.3 Medium2026-06-09
CVE-2026-44754 Missing caller identification check-in for ODP Data Replication APIs — ODP Data Replication APIsCWE-862 6.6 Medium2026-06-09
CVE-2026-44751 Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform — SAP NetWeaver AS ABAP and ABAP PlatformCWE-862 7.1 High2026-06-09
CVE-2026-44750 Missing Authorization check in SAP MDG (Review Match Groups Application) — SAP MDG (Review Match Groups Application)CWE-862 4.3 Medium2026-06-09
CVE-2026-44748 XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform — SAP NetWeaver AS ABAP and ABAP PlatformCWE-347 9.9 Critical2026-06-09
CVE-2026-44746 Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) — SAP NetWeaver AS Java (JDBC Test Servlet)CWE-79 6.1 Medium2026-06-09
CVE-2026-44744 SQL Injection vulnerability in SAP S/4HANA — SAP S/4HANACWE-89 6.5 Medium2026-06-09
CVE-2026-44743 Security Misconfiguration vulnerability in SAP Business Objects — SAP Business ObjectsCWE-497 3.7 Low2026-06-09
CVE-2026-40128 Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) — SAP NetWeaver Application Server Java (Web Container)CWE-35 9.0 Critical2026-06-09
CVE-2026-27671 Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform — SAP NetWeaver AS ABAP and ABAP PlatformCWE-121 9.8 Critical2026-06-09
CVE-2026-24315 Path Traversal Vulnerability in SAP Fiori (launchpad) — SAP Fiori (launchpad)CWE-35 4.2 Medium2026-06-09
CVE-2026-44749 Information Disclosure vulnerability in SAP Gateway — SAP GatewayCWE-497 4.3 Medium2026-05-26
CVE-2026-27680 CSS Injection vulnerability in SAP NetWeaver Application Server ABAP — SAP NetWeaver Application Server ABAPCWE-276 3.1 Low2026-05-14
CVE-2026-40137 Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) — Business Server Pages Application (TAF_APPLAUNCHER)CWE-79 6.1 Medium2026-05-12

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.