Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 570

Browse all 570 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE IDTitleCVSSSeverityPublished
CVE-2025-42928 Deserialization Vulnerability in SAP jConnect - SDK for ASE — SAP jConnect - SDK for ASECWE-502 9.1 Critical2025-12-09
CVE-2025-42904 Information Disclosure vulnerability in Application Server ABAP — Application Server ABAPCWE-549 6.5 Medium2025-12-09
CVE-2025-42896 Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence PlatformCWE-116 5.4 Medium2025-12-09
CVE-2025-42891 Missing Authorization check in SAP Enterprise Search for ABAP — SAP Enterprise Search for ABAPCWE-862 5.5 Medium2025-12-09
CVE-2025-42880 Code Injection vulnerability in SAP Solution Manager — SAP Solution ManagerCWE-94 9.9 Critical2025-12-09
CVE-2025-42878 Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) — SAP Web Dispatcher and Internet Communication Manager (ICM)CWE-1244 8.2 High2025-12-09
CVE-2025-42877 Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server — SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerCWE-787 7.5 High2025-12-09
CVE-2025-42876 Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger) — SAP S/4 HANA Private Cloud (Financials General Ledger)CWE-405 7.1 High2025-12-09
CVE-2025-42875 Missing Authentication check in SAP NetWeaver Internet Communication Framework — SAP NetWeaver Internet Communication FrameworkCWE-306 6.6 Medium2025-12-09
CVE-2025-42874 Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius) — SAP NetWeaver (remote service for Xcelsius)CWE-405 7.9 High2025-12-09
CVE-2025-42873 Denial of Service (DoS) in SAPUI5 framework (Markdown-it component) — SAPUI5 framework (Markdown-it component)CWE-405 5.9 Medium2025-12-09
CVE-2025-42872 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise PortalCWE-489 6.1 Medium2025-12-09
CVE-2025-42940 Memory Corruption vulnerability in SAP CommonCryptoLib — SAP CommonCryptoLibCWE-787 7.5 High2025-11-11
CVE-2025-42924 Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP) — SAP S/4HANA landscape (SAP E-Recruiting BSP)CWE-601 6.1 Medium2025-11-11
CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java — SAP NetWeaver Application Server JavaCWE-22 5.3 Medium2025-11-11
CVE-2025-42899 Missing Authorization check in SAP S4CORE (Manage Journal Entries) — SAP S4CORE (Manage Journal Entries)CWE-862 4.3 Medium2025-11-11
CVE-2025-42897 Information Disclosure vulnerability in SAP Business One (SLD) — SAP Business One (SLD)CWE-522 5.3 Medium2025-11-11
CVE-2025-42895 Code Injection vulnerability in SAP HANA JDBC Client — SAP HANA JDBC ClientCWE-94 6.9 Medium2025-11-11
CVE-2025-42894 Path Traversal vulnerability in SAP Business Connector — SAP Business ConnectorCWE-22 6.8 Medium2025-11-11
CVE-2025-42893 Open Redirect vulnerability in SAP Business Connector — SAP Business ConnectorCWE-601 6.1 Medium2025-11-11
CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector — SAP Business ConnectorCWE-78 6.8 Medium2025-11-11
CVE-2025-42890 Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui) — SQL Anywhere Monitor (Non-Gui)CWE-798 10.0 Critical2025-11-11
CVE-2025-42889 SQL Injection vulnerability in SAP Starter Solution (PL SAFT) — SAP Starter Solution (PL SAFT)CWE-89 5.4 Medium2025-11-11
CVE-2025-42888 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for WindowsCWE-316 5.5 Medium2025-11-11
CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager — SAP Solution ManagerCWE-94 9.9 Critical2025-11-11
CVE-2025-42886 Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector — SAP Business ConnectorCWE-79 6.1 Medium2025-11-11
CVE-2025-42885 Missing authentication in SAP HANA 2.0 (hdbrss) — SAP HANA 2.0 (hdbrss)CWE-306 5.8 Medium2025-11-11
CVE-2025-42884 JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal — SAP NetWeaver Enterprise PortalCWE-943 6.5 Medium2025-11-11
CVE-2025-42883 Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) — SAP NetWeaver Application Server for ABAP (Migration Workbench)CWE-434 2.7 Low2025-11-11
CVE-2025-42882 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAPCWE-862 4.3 Medium2025-11-11

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.