Login Request a demo
SA
Vendor
Sap
438 products with CVEs on record
1,841
CVEs
25
On KEV
0
New 30D
Products
NE
NetWeaver
SAP
10.0
109 CVEs10 on KEV0 new
NA
Netweaver Application Server Java
Sap
10.0
69 CVEs7 on KEV0 new
NA
Netweaver Application Server Abap
Sap
10.0
86 CVEs1 on KEV0 new
SM
Solution Manager
SAP
10.0
33 CVEs1 on KEV0 new
CC
Commerce Cloud
SAP
9.8
18 CVEs1 on KEV0 new
WD
Web Dispatcher
Sap
10.0
11 CVEs1 on KEV0 new
CR
Customer Relationship Management
Sap
8.8
10 CVEs1 on KEV0 new
CS
Content Server
Sap
10.0
6 CVEs1 on KEV0 new
CR
Customer Relationship Management (CRM)
SAP
6.6
1 CVEs1 on KEV0 new
MP
Multiple Products
SAP
10.0
1 CVEs1 on KEV0 new
3V
3d Visual Enterprise Viewer
Sap
8.8
131 CVEs0 on KEV0 new
BB
Businessobjects Business Intelligence Platform
Sap
9.8
73 CVEs0 on KEV0 new
BB
Businessobjects Business Intelligence
Sap
9.9
45 CVEs0 on KEV0 new
HA
Hana
Sap
9.8
38 CVEs0 on KEV0 new
BO
Business One
Sap
9.8
31 CVEs0 on KEV0 new
IG
Internet Graphics Server
Sap
9.8
28 CVEs0 on KEV0 new
3V
3d Visual Enterprise Author
Sap
7.8
27 CVEs0 on KEV0 new
BU
Businessobjects
Sap
9.8
23 CVEs0 on KEV0 new
NA
Netweaver Abap
Sap
9.8
21 CVEs0 on KEV0 new
NP
Netweaver Process Integration
Sap
9.4
21 CVEs0 on KEV0 new
NE
Netweaver Enterprise Portal
Sap
6.5
20 CVEs0 on KEV0 new
BO
Business Objects Business Intelligence Platform
Sap
9.8
19 CVEs0 on KEV0 new
HE
Hana Extended Application Services
Sap
8.1
18 CVEs0 on KEV0 new
SB
Sap Basis
Sap
9.0
18 CVEs0 on KEV0 new
S4
S/4hana
Sap
9.9
17 CVEs0 on KEV0 new
DM
Disclosure Management
Sap
9.8
16 CVEs0 on KEV0 new
HA
Host Agent
Sap
9.8
15 CVEs0 on KEV0 new
AS
Adaptive Server Enterprise
Sap
8.8
14 CVEs0 on KEV0 new
EN
Enable Now
Sap
9.8
14 CVEs0 on KEV0 new
AP
Approuter
Sap
9.1
13 CVEs0 on KEV0 new
S4
S4core
Sap
9.1
13 CVEs0 on KEV0 new
AP
Abap Platform
Sap
9.8
12 CVEs0 on KEV0 new
CR
Customer Relationship Management Webclient UI
Sap
7.7
12 CVEs0 on KEV0 new
NA
Netweaver AS Abap
Sap
9.8
12 CVEs0 on KEV0 new
SD
Sap DB
Sap
–
12 CVEs0 on KEV0 new
SK
Sap Kernel
Sap
8.8
11 CVEs0 on KEV0 new
SW
Sap Web Application Server
Sap
–
11 CVEs0 on KEV0 new
SR
Supplier Relationship Management
Sap
9.8
11 CVEs0 on KEV0 new
CO
Commerce
Sap
9.9
10 CVEs0 on KEV0 new
NA
Netweaver AS Abap Business Server Pages
Sap
6.5
10 CVEs0 on KEV0 new
IT
Internet Transaction Server
Sap
6.1
9 CVEs0 on KEV0 new
NA
Netweaver Application Server For Java
Sap
9.8
9 CVEs0 on KEV0 new
CC
Cloud Connector
Sap
9.8
8 CVEs0 on KEV0 new
HD
Hana Database
Sap
9.8
8 CVEs0 on KEV0 new
HY
Hybris
Sap
8.6
8 CVEs0 on KEV0 new
LM
Landscape Management
Sap
9.8
8 CVEs0 on KEV0 new
MA
Maxdb
Sap
7.2
8 CVEs0 on KEV0 new
MP
Mobile Platform
Sap
7.5
8 CVEs0 on KEV0 new
RL
Rfc Library
Sap
–
8 CVEs0 on KEV0 new
SA
Sql Anywhere
Sap
9.8
8 CVEs0 on KEV0 new
TR
Trex
Sap
9.8
8 CVEs0 on KEV0 new
AF
Afaria
Sap
9.1
7 CVEs0 on KEV0 new
BC
Business Connector
Sap
6.8
7 CVEs0 on KEV0 new
BW
Business Warehouse
Sap
9.9
7 CVEs0 on KEV0 new
CR
Crystal Reports
Sap
9.8
7 CVEs0 on KEV0 new
NA
Netweaver AS Internet Graphics Server
Sap
5.9
7 CVEs0 on KEV0 new
SH
S/4 Hana
Sap
8.8
7 CVEs0 on KEV0 new
SA
Sapscore
Sap
9.1
7 CVEs0 on KEV0 new
BA
Basis
Sap
8.8
6 CVEs0 on KEV0 new
BA
Business Application Software Integrated Solution
Sap
8.8
6 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-66778
AP
Approuter
Sap
5.3
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66777
AP
Approuter
Sap
5.9
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66776
AP
Approuter
Sap
5.9
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66775
AP
Approuter
Sap
4.3
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66774
AP
Approuter
Sap
3.7
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66761
AP
Approuter
Sap
4.3
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66760
AP
Approuter
Sap
6.4
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58239
AP
Approuter
Sap
3.7
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58238
AP
Approuter
Sap
5.9
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58237
AP
Approuter
Sap
5.9
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58230
AP
Approuter
Sap
7.0
0%
Aug 11Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-44745
AP
Approuter
Sap
8.1
0%
Jul 14Open Redirect vulnerability in SAP Approuter
CVE-2026-27690
AP
Approuter
Sap
9.1
1%
Jul 14HTTP Request Smuggling in SAP Approuter
CVE-2026-27680
NA
Netweaver Application Server Abap
Sap
4.3
0%
May 14CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-40135
NA
Netweaver Application Server Abap
Sap
6.5
1%
May 12OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2026-27682
NA
Netweaver Application Server Abap
Sap
6.1
0%
May 12Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)
CVE-2026-34264
HC
Human Capital Management
Sap
6.5
0%
Apr 14Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA
CVE-2026-34262
HD
Hana Database Explorer
Sap
4.3
0%
Apr 14Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
CVE-2026-34257
NA
Netweaver Application Server Abap
Sap
6.1
0%
Apr 14Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-27679
MR
Manage Reference Structures
Sap
6.5
0%
Apr 14Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)
CVE-2026-27674
NA
Netweaver Application Server Java
Sap
6.1
0%
Apr 14Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)
CVE-2026-27688
NA
Netweaver Application Server Abap
Sap
5.0
0%
Mar 10Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a…
CVE-2026-24316
NA
Netweaver Application Server Abap
Sap
6.4
0%
Mar 10SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints
CVE-2026-24310
NA
Netweaver Application Server Abap
Sap
4.3
0%
Mar 10Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive…
CVE-2026-24309
NA
Netweaver Application Server Abap
Sap
6.4
0%
Mar 10Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert…
CVE-2026-24314
SU
S/4hana Uiapfi70
Sap
4.3
0%
Feb 24Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted
CVE-2026-24328
BS
Business Server Pages
Sap
6.1
0%
Feb 10SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when clicked by a victim, redirect them to attacker?controlled…
CVE-2026-24327
SE
Strategic Enterprise Management
Sap
4.3
0%
Feb 10Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages), an authenticated attacker could access information that…
CVE-2026-24326
SD
S/4hana Defense & Security
Sap
4.3
0%
Feb 10Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker with user privileges could call remote-enabled function…
CVE-2026-24325
BE
Businessobjects Enterprise
Sap
4.8
0%
Feb 10SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability
CVE-2026-24324
BB
Businessobjects Business Intelligence Platform
Sap
6.5
0%
Feb 10SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause…
CVE-2026-24323
S4
S4core
Sap
6.1
0%
Feb 10The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized
CVE-2026-24322
ST
Solution Tools Plug-in
Sap
7.7
0%
Feb 10SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to…
CVE-2026-24321
CC
Commerce Cloud
Sap
5.3
0%
Feb 10SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not…
CVE-2026-24320
NA
Netweaver AS Abap Krnl64uc
Sap
3.1
0%
Feb 10Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by…
CVE-2026-24319
BO
Business One
Sap
5.8
0%
Feb 10In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation
CVE-2026-24312
SB
Sap Basis
Sap
5.2
0%
Feb 10An erroneous authorization check in SAP Business Workflow leads to privilege escalation
CVE-2026-23689
AP
Advanced Planning And Optimization
Sap
7.7
0%
Feb 10Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a…
CVE-2026-23688
S4
S4core
Sap
4.3
0%
Feb 10SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges
CVE-2026-23687
SB
Sap Basis
Sap
8.8
0%
Feb 10SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML…
CVE-2026-23686
NA
Netweaver Application Server Java
Sap
3.4
0%
Feb 10Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the…
CVE-2026-23685
NE
Netweaver
Sap
4.4
0%
Feb 10Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially crafted content to…
CVE-2026-23684
CC
Commerce Cloud
Sap
5.9
0%
Feb 10A race condition vulnerability exists in the SAP Commerce cloud
CVE-2026-23681
ST
Solution Tools Plug-in
Sap
4.3
0%
Feb 10Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific function modules to retrieve information…
CVE-2026-0509
NA
Netweaver AS Abap Krnl64nuc
Sap
9.6
0%
Feb 10SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC…
CVE-2026-0508
BB
Businessobjects Business Intelligence Platform
Sap
8.1
0%
Feb 10The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application
CVE-2026-0505
DM
Document Management System
Sap
6.1
0%
Feb 10The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated
CVE-2026-0490
BB
Businessobjects Business Intelligence Platform
Sap
7.5
0%
Feb 10SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the…
CVE-2026-0488
NA
Netweaver Application Server Abap
Sap
9.9
1%
Feb 10An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities,…
CVE-2026-0486
ST
Solution Tools Plug-in
Sap
4.3
0%
Feb 10In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system…
CVE-2026-0485
BB
Businessobjects Business Intelligence Platform
Sap
7.5
0%
Feb 10SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and…
CVE-2026-0484
SB
Sap Basis
Sap
6.5
0%
Feb 10Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text…
CVE-2026-0514
BC
Business Connector
Sap
6.1
0%
Jan 13Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link
CVE-2026-0513
SR
Supplier Relationship Management
Sap
4.7
0%
Jan 13Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if…
CVE-2026-0506
NA
Netweaver Application Server Abap
Sap
8.1
0%
Jan 13Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines…
CVE-2026-0500
IE
Introscope Enterprise Manager
Sap
8.8
0%
Jan 13Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthenticated attacker could create a malicious JNLP (Java…
CVE-2026-0498
SH
S/4 Hana
Sap
7.2
0%
Jan 13SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC
CVE-2026-0492
HD
Hana Database
Sap
8.8
0%
Jan 13SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access
CVE-2025-42894
BC
Business Connector
Sap
6.8
0%
Nov 11Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete…
CVE-2025-42893
BC
Business Connector
Sap
6.1
0%
Nov 11Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an…