Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 571

Browse all 571 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE IDTitleCVSSSeverityPublished
CVE-2025-42969 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP PlatformCWE-79 6.1 Medium2025-07-08
CVE-2025-42968 Missing Authorization check in SAP NetWeaver (RFC enabled function module) — SAP NetWeaver (RFC enabled function module)CWE-862 5.0 Medium2025-07-08
CVE-2025-42967 Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation) — SAP S/4HANA and SAP SCM (Characteristic Propagation)CWE-94 9.9 Critical2025-07-08
CVE-2025-42966 Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service) — SAP NetWeaver (XML Data Archiving Service)CWE-502 9.1 Critical2025-07-08
CVE-2025-42965 Server Side Request Forgery(SSRF) vulnerability in SAP BusinessObjects BI Platform Central Management Console Promotion Management Application — SAP BusinessObjects BI Platform Central Management Console Promotion Management ApplicationCWE-918 4.1 Medium2025-07-08
CVE-2025-42964 Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration — SAP NetWeaver Enterprise Portal AdministrationCWE-502 9.1 Critical2025-07-08
CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer ) — SAP NetWeaver Application Server for Java (Log Viewer )CWE-502 9.1 Critical2025-07-08
CVE-2025-42962 Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) — SAP Business Warehouse (Business Explorer Web 3.5 loading animation)CWE-79 6.1 Medium2025-07-08
CVE-2025-42961 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAPCWE-862 4.9 Medium2025-07-08
CVE-2025-42960 Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools — SAP Business Warehouse and SAP BW/4HANA BEx ToolsCWE-862 4.3 Medium2025-07-08
CVE-2025-42959 Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 — SAP NetWeaver ABAP Server and ABAP PlatformCWE-308 8.1 High2025-07-08
CVE-2025-42954 Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application) — SAP NetWeaver Business Warehouse (CCAW application)CWE-835 2.7 Low2025-07-08
CVE-2025-42953 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAPCWE-862 8.1 High2025-07-08
CVE-2025-42952 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis — SAP Business Warehouse and SAP Plug-In BasisCWE-862 7.7 High2025-07-08
CVE-2025-31326 HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) — SAP BusinessObjects Business Intelligence Platform (Web Intelligence)CWE-80 4.1 Medium2025-07-08
CVE-2025-42998 Security misconfiguration vulnerability in SAP Business One Integration Framework — SAP Business One Integration FrameworkCWE-346 5.3 Medium2025-06-10
CVE-2025-42996 Multiple vulnerabilities in SAP MDM Server — SAP MDM ServerCWE-590 5.6 Medium2025-06-10
CVE-2025-42995 Multiple vulnerabilities in SAP MDM Server — SAP MDM ServerCWE-590 7.5 High2025-06-10
CVE-2025-42994 Multiple vulnerabilities in SAP MDM Server — SAP MDM ServerCWE-590 7.5 High2025-06-10
CVE-2025-42993 Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) — SAP S/4HANA (Enterprise Event Enablement)CWE-862 6.7 Medium2025-06-10
CVE-2025-42991 Missing Authorization check in SAP S/4HANA (Bank Account Application) — SAP S/4HANA (Bank Account Application)CWE-862 4.3 Medium2025-06-10
CVE-2025-42990 HTML Injection in Unprotected SAPUI5 applications — SAPUI5 applicationsCWE-79 3.0 Low2025-06-10
CVE-2025-42989 Missing Authorization check in SAP NetWeaver Application Server for ABAP — SAP NetWeaver Application Server for ABAPCWE-862 9.6 Critical2025-06-10
CVE-2025-42988 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform — SAP Business Objects Business Intelligence PlatformCWE-918 3.7 Low2025-06-10
CVE-2025-42987 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) — SAP S/4HANA (Manage Processing Rules - For Bank Statement)CWE-862 4.3 Medium2025-06-10
CVE-2025-42984 Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) — SAP S/4HANA (Manage Central Purchase Contract application)CWE-862 5.4 Medium2025-06-10
CVE-2025-42983 Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis — SAP Business Warehouse and SAP Plug-In BasisCWE-862 8.5 High2025-06-10
CVE-2025-42982 Information Disclosure in SAP GRC (AC Plugin) — SAP GRC (AC Plugin)CWE-862 8.8 High2025-06-10
CVE-2025-42977 Directory Traversal vulnerability in SAP NetWeaver Visual Composer — SAP NetWeaver Visual ComposerCWE-22 7.6 High2025-06-10
CVE-2025-31325 Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) — SAP NetWeaver (ABAP Keyword Documentation)CWE-79 5.8 Medium2025-06-10

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.