SAP_SE 厂商相关 570 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
SAP SE 是全球领先的企业应用软件供应商，其核心产品涵盖 ERP、CRM 及数据分析平台。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本，常因复杂集成逻辑或配置缺陷引发。近期关注点包括云环境下的权限管理风险及供应链依赖问题。作为关键基础设施提供商，其系统稳定性与数据完整性对众多大型企业至关重要，需持续强化补丁管理与访问控制机制。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-37486 | SAP Commerce 信息泄露漏洞 — SAP Commerce (OCC API)CWE-524 | 5.9 | Medium | 2023-08-08 |
| CVE-2023-39440 | SAP BusinessObjects Business Intelligence 信息泄露漏洞 — SAP BusinessObjects Business IntelligenceCWE-312 | 4.4 | Medium | 2023-08-08 |
| CVE-2023-39439 | SAP Commerce 安全漏洞 — SAP CommerceCWE-258 | 8.8 | High | 2023-08-08 |
| CVE-2023-39437 | SAP business One allows 跨站脚本漏洞 — SAP Business OneCWE-79 | 7.6 | High | 2023-08-08 |
| CVE-2023-39436 | SAP Supplier Relationship Management 信息泄露漏洞 — SAP Supplier Relationship ManagementCWE-306 | 5.8 | Medium | 2023-08-08 |
| CVE-2023-37492 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver AS ABAP and ABAP PlatformCWE-863 | 4.9 | Medium | 2023-08-08 |
| CVE-2023-37491 | SAP Message Server 授权问题漏洞 — SAP Message ServerCWE-863 | 7.5 | High | 2023-08-08 |
| CVE-2023-37490 | SAP Business Objects 代码问题漏洞 — SAP BusinessObjects Business Intelligence (Installer)CWE-427 | 7.6 | High | 2023-08-08 |
| CVE-2023-37488 | SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver Process IntegrationCWE-79 | 6.1 | Medium | 2023-08-08 |
| CVE-2023-37487 | SAP Business One 信息泄露漏洞 — SAP Business One (Service Layer)CWE-497 | 5.3 | Medium | 2023-08-08 |
| CVE-2023-37484 | SAP PowerDesigner 信息泄露漏洞 — SAP PowerDesignerCWE-327 | 5.3 | Medium | 2023-08-08 |
| CVE-2023-37483 | SAP PowerDesigner 访问控制错误漏洞 — SAP PowerDesignerCWE-306 | 9.8 | Critical | 2023-08-08 |
| CVE-2023-36926 | SAP Host Agent 授权问题漏洞 — SAP Host AgentCWE-306 | 3.7 | Low | 2023-08-08 |
| CVE-2023-36923 | SAP PowerDesigner 代码注入漏洞 — SAP PowerDesignerCWE-94 | 7.8 | High | 2023-08-08 |
| CVE-2023-33993 | SAP Business One SQL注入漏洞 — SAP Business One (B1i Layer)CWE-89 | 7.1 | High | 2023-08-08 |
| CVE-2023-36925 | SAP Solution Manager 代码问题漏洞 — SAP Solution Manager (Diagnostics agent)CWE-918 | 7.2 | High | 2023-07-11 |
| CVE-2023-36924 | SAP ERP 安全漏洞 — SAP ERP Defense Forces and Public SecurityCWE-117 | 4.9 | Medium | 2023-07-11 |
| CVE-2023-36922 | SAP NetWeaver ABAP Server 操作系统命令注入漏洞 — SAP ECC and SAP S/4HANA (IS-OIL)CWE-78 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36921 | SAP Solution Manager 安全漏洞 — SAP Solution Manager (Diagnostic Agent)CWE-644 | 7.2 | High | 2023-07-11 |
| CVE-2023-36919 | SAP Enable Now 安全漏洞 — SAP Enable NowCWE-213 | 5.3 | Medium | 2023-07-11 |
| CVE-2023-36918 | SAP Enable Now 跨站脚本漏洞 — SAP Enable NowCWE-79 | 6.1 | Medium | 2023-07-11 |
| CVE-2023-36917 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 — SAP BusinessObjects Business Intelligence PlatformCWE-307 | 5.9 | Medium | 2023-07-11 |
| CVE-2023-35874 | SAP NetWeaver Application Server 授权问题漏洞 — SAP NetWeaver AS ABAP and ABAP PlatformCWE-306 | 6.0 | Medium | 2023-07-11 |
| CVE-2023-35873 | SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Runtime Workbench)CWE-306 | 6.5 | Medium | 2023-07-11 |
| CVE-2023-35872 | SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Message Display Tool)CWE-306 | 6.5 | Medium | 2023-07-11 |
| CVE-2023-35871 | SAP Web Dispatcher 缓冲区错误漏洞 — SAP Web DispatcherCWE-787 | 7.7 | High | 2023-07-11 |
| CVE-2023-35870 | SAP S/4HANA 安全漏洞 — SAP S/4HANA (Manage Journal Entry Template)CWE-732 | 6.3 | Medium | 2023-07-11 |
| CVE-2023-33992 | SAP BW/4HANA 安全漏洞 — SAP Business Warehouse and SAP BW/4HANACWE-862 | 4.5 | Medium | 2023-07-11 |
| CVE-2023-33990 | SAP SQL Anywhere 安全漏洞 — SAP SQL AnywhereCWE-732 | 7.8 | High | 2023-07-11 |
| CVE-2023-33989 | SAP NetWeaver 路径遍历漏洞 — SAP NetWeaver (BI CONT ADD ON)CWE-22 | 8.7 | High | 2023-07-11 |
本页汇总了 SAP_SE 厂商截至目前公开的全部 570 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。