Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 571

Browse all 571 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE IDTitleCVSSSeverityPublished
CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) — SAP NetWeaver (JMS service)CWE-502 4.4 Medium2026-02-10
CVE-2026-23684 Race condition vulnerability in SAP Commerce Cloud — SAP Commerce CloudCWE-366 5.9 Medium2026-02-10
CVE-2026-23681 Missing Authorization check in a function module in SAP Support Tools Plug-In — SAP Support Tools Plug-InCWE-862 4.3 Medium2026-02-10
CVE-2026-0509 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP PlatformCWE-862 9.6 Critical2026-02-10
CVE-2026-0508 Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence PlatformCWE-601 7.3 High2026-02-10
CVE-2026-0505 Multiple vulnerabilities in BSP Applications of SAP Document Management System — SAP Document Management SystemCWE-79 6.1 Medium2026-02-10
CVE-2026-0490 Denial of service (DOS) in SAP BusinessObjects BI Platform — SAP BusinessObjects BI PlatformCWE-862 7.5 High2026-02-10
CVE-2026-0488 Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) — SAP CRM and SAP S/4HANA (Scripting Editor)CWE-862 9.9 Critical2026-02-10
CVE-2026-0486 Missing Authorization Check in ABAP based SAP systems — ABAP based SAP systemsCWE-862 5.0 Medium2026-02-10
CVE-2026-0485 Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform — SAP BusinessObjects BI PlatformCWE-405 7.5 High2026-02-10
CVE-2026-0484 Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA — SAP NetWeaver Application Server ABAP and SAP S/4HANACWE-601 6.5 Medium2026-02-10
CVE-2026-23683 Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-862 4.3 Medium2026-01-27
CVE-2026-0514 Cross-Site Scripting (XSS) vulnerability in SAP Business Connector — SAP Business ConnectorCWE-79 6.1 Medium2026-01-13
CVE-2026-0513 Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) — SAP Supplier Relationship Management (SICF Handler in SRM Catalog)CWE-601 4.7 Medium2026-01-13
CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-862 8.1 High2026-01-13
CVE-2026-0510 Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping — NW AS Java UME User MappingCWE-326 3.0 Low2026-01-13
CVE-2026-0507 OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK — SAP Application Server for ABAP and SAP NetWeaver RFCSDKCWE-78 8.4 High2026-01-13
CVE-2026-0506 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP PlatformCWE-862 8.1 High2026-01-13
CVE-2026-0504 Insufficient Input Handling in JNDI Operations of SAP Identity Management — SAP Identity ManagementCWE-943 3.8 Low2026-01-13
CVE-2026-0503 Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) — SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)CWE-862 6.4 Medium2026-01-13
CVE-2026-0501 SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger) — SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)CWE-89 9.9 Critical2026-01-13
CVE-2026-0500 Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation) — SAP Wily Introscope Enterprise Manager (WorkStation)CWE-94 9.6 Critical2026-01-13
CVE-2026-0499 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise PortalCWE-79 6.1 Medium2026-01-13
CVE-2026-0498 Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) — SAP S/4HANA (Private Cloud and On-Premise)CWE-94 9.1 Critical2026-01-13
CVE-2026-0497 Missing Authorization check in Business Server Pages Application (Product Designer Web UI) — Business Server Pages Application (Product Designer Web UI)CWE-862 4.3 Medium2026-01-13
CVE-2026-0496 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-434 6.6 Medium2026-01-13
CVE-2026-0495 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-15 5.1 Medium2026-01-13
CVE-2026-0494 Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-497 4.3 Medium2026-01-13
CVE-2026-0493 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) — SAP Fiori App (Intercompany Balance Reconciliation)CWE-352 4.3 Medium2026-01-13
CVE-2026-0492 Privilege escalation vulnerability in SAP HANA database — SAP HANA databaseCWE-306 8.8 High2026-01-13

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.