Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SAP_SE — Vulnerabilities & Security Advisories 571

Browse all 571 CVE security advisories affecting SAP_SE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SAP SE operates as a global leader in enterprise application software, primarily providing ERP solutions that manage complex business processes, supply chains, and human resources for large organizations. This extensive attack surface has resulted in 527 recorded CVEs, reflecting the critical nature of its infrastructure. Historically, vulnerabilities within SAP systems frequently involve remote code execution, SQL injection, and cross-site scripting, often stemming from complex integrations and legacy components. Privilege escalation remains a significant concern, allowing unauthorized users to gain administrative access. While SAP maintains rigorous security protocols, past incidents highlight risks associated with default configurations and unpatched middleware. The company actively issues security patches, yet the sheer volume of disclosed flaws underscores the challenges of securing highly interconnected, mission-critical enterprise environments against sophisticated cyber threats.

CVE IDTitleCVSSSeverityPublished
CVE-2025-23192 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) — SAP BusinessObjects Business Intelligence (BI Workspace)CWE-79 8.2 High2025-06-10
CVE-2025-43011 Missing Authorization Check in SAP Landscape Transformation (PCL Basis) — SAP Landscape Transformation (PCL Basis)CWE-862 7.7 High2025-05-13
CVE-2025-43010 Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL)) — SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL))CWE-94 8.3 High2025-05-13
CVE-2025-43009 Missing Authorization check in SAP Service Parts Management (SPM) — SAP Service Parts Management (SPM)CWE-862 6.3 Medium2025-05-13
CVE-2025-43008 Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal — SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalCWE-862 5.8 Medium2025-05-13
CVE-2025-43007 Missing Authorization check in SAP Service Parts Management (SPM) — SAP Service Parts Management (SPM)CWE-862 6.3 Medium2025-05-13
CVE-2025-43006 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) — SAP Supplier Relationship Management (Master Data Management Catalog)CWE-79 6.1 Medium2025-05-13
CVE-2025-43005 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for WindowsCWE-256 4.3 Medium2025-05-13
CVE-2025-43004 Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard) — SAP Digital Manufacturing (Production Operator Dashboard)CWE-862 5.3 Medium2025-05-13
CVE-2025-43003 Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) — SAP S/4HANA (Private Cloud & On-Premise)CWE-749 6.4 Medium2025-05-13
CVE-2025-43002 Missing Authorization check in SAP S4/HANA (OData meta-data property) — SAP S4/HANA (OData meta-data property)CWE-472 4.3 Medium2025-05-13
CVE-2025-43000 Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) — SAP Business Objects Business Intelligence Platform (PMW)CWE-862 7.9 High2025-05-13
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server) — SAP NetWeaver (Visual Composer development server)CWE-502 9.1 Critical2025-05-13
CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client — SAP Gateway ClientCWE-732 6.6 Medium2025-05-13
CVE-2025-31329 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform — SAP NetWeaver Application Server ABAP and ABAP PlatformCWE-141 6.2 Medium2025-05-13
CVE-2025-30018 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit)CWE-611 8.6 High2025-05-13
CVE-2025-30012 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit)CWE-502 10.0 Critical2025-05-13
CVE-2025-30011 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit)CWE-497 5.3 Medium2025-05-13
CVE-2025-30010 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit)CWE-601 6.1 Medium2025-05-13
CVE-2025-30009 Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) — SAP Supplier Relationship Management (Live Auction Cockpit)CWE-79 6.1 Medium2025-05-13
CVE-2025-26662 Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management Console — SAP Data Services Management ConsoleCWE-79 4.4 Medium2025-05-13
CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server) — SAP NetWeaver (Visual Composer development server)CWE-434 10.0 Critical2025-04-24
CVE-2025-31328 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) — SAP S/4 HANA (Learning Solution)CWE-352 4.6 Medium2025-04-22
CVE-2025-31327 OData meta-data property entity tampering in SAP Field Logistics — SAP Field LogisticsCWE-472 4.3 Medium2025-04-22
CVE-2025-31333 Odata meta-data tampering in SAP S4CORE entity — SAP S4CORE entityCWE-472 4.3 Medium2025-04-08
CVE-2025-31332 Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence PlatformCWE-277 6.6 Medium2025-04-08
CVE-2025-31331 Authorization Bypass vulnerability in SAP NetWeaver — SAP NetWeaverCWE-863 4.3 Medium2025-04-08
CVE-2025-31330 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) — SAP Landscape Transformation (Analysis Platform)CWE-94 9.9 Critical2025-04-08
CVE-2025-30017 Missing Authorization check in SAP Solution Manager — SAP Solution ManagerCWE-862 4.4 Medium2025-04-08
CVE-2025-30016 Authentication Bypass Vulnerability in SAP Financial Consolidation — SAP Financial ConsolidationCWE-921 9.8 Critical2025-04-08

This page lists every published CVE security advisory associated with SAP_SE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.