SAP_SE vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-89124	SH SAP HANA (Display Product Catalog Based on Customs Declaration) SAP_SE	4.3	0%	Oct 13	Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)
CVE-2026-89122	SN SAP NetWeaver Enterprise Portal SAP_SE	6.1	0%	Oct 13	Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
CVE-2026-89121	SS SAP S/4HANA (Linear Asset Management RAP Business Object) SAP_SE	4.7	0%	Oct 13	Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)
CVE-2026-89120	SA SAP ABAP Platform SAP_SE	7.1	0%	Oct 13	Missing authorization check in SAP ABAP Platform
CVE-2026-89118	SN SAP NetWeaver Enterprise Portal SAP_SE	5.3	0%	Oct 13	Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
CVE-2026-89117	SN SAP NetWeaver Enterprise Portal SAP_SE	6.1	0%	Oct 13	Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
CVE-2026-89116	SY SAP yeoman-ui SAP_SE	5.9	0%	Oct 13	OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code
CVE-2026-89113	SC SAP Commerce Cloud (OOTB Code) SAP_SE	8.8	0%	Oct 13	SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
CVE-2026-89112	CL CLA-Assistant SAP_SE	6.5	0%	Oct 13	Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure
CVE-2026-89111	SC SAP Cloud SAP_SE	10.0	0%	Oct 13	OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
CVE-2026-89110	SN SAP NetWeaver Visual Composer SAP_SE	9.9	0%	Oct 13	Broken Access Control in SAP NetWeaver Visual Composer
CVE-2026-89108	SM SAP Manufacturing Integration and Intelligence (Configuration Service) SAP_SE	9.1	0%	Oct 13	Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
CVE-2026-89107	SS SAP S/4HANA (Manage Substitution/Validation Rules) SAP_SE	9.9	0%	Oct 13	Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
CVE-2026-89106	SA SAPUI5 SAP_SE	4.4	0%	Oct 13	Cross Site Scripting (XSS) vulnerability in SAPUI5
CVE-2026-89105	SA SAP/cloud-security-services-integration-library SAP_SE	4.2	0%	Oct 13	Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library
CVE-2026-76976	SN SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) SAP_SE	5.4	0%	Oct 13	Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)
CVE-2026-76975	SS SAPUI5 (Support Assistant Overlay) SAP_SE	6.1	0%	Oct 13	Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay)
CVE-2026-76972	SM SAP Manufacturing Integration and Intelligence SAP_SE	6.5	0%	Oct 13	Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence
CVE-2026-58249	SN SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) SAP_SE	7.5	0%	Oct 13	Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
CVE-2026-58242	SC SAP Cloud Connector SAP_SE	3.5	0%	Oct 13	Improper Authorization check in SAP Cloud Connector
CVE-2026-76974	SF SAP Fiori Launchpad SAP_SE	5.3	0%	Sep 22	Information Disclosure vulnerability in SAP Fiori Launchpad
CVE-2026-76977	SO SAPUI5(Frame Options Allowlist) SAP_SE	4.3	0%	Sep 8	Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)
CVE-2026-76971	SM SAP Manufacturing Integration and Intelligence SAP_SE	6.5	0%	Sep 8	Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
CVE-2026-76969	SC SAP Cloud Application Programming Model (CAP) SAP_SE	9.4	0%	Sep 8	Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
CVE-2026-76968	SW SAP Web Dispatcher, Internet Communication Manager and SAP Content Server SAP_SE	6.5	0%	Sep 8	Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
CVE-2026-76967	SN SAP NetWeaver Business Client SAP_SE	7.8	0%	Sep 8	Insecure Deserialization in SAP NetWeaver Business Client
CVE-2026-76963	SN SAP NetWeaver and ABAP Platform SAP_SE	4.3	0%	Sep 8	Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
CVE-2026-76962	SS SAP S/4HANA (Manage Bank Chains app) SAP_SE	4.3	0%	Sep 8	Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)
CVE-2026-76961	SS SAP S/4HANA (Finance for Advanced Payment Management) SAP_SE	3.5	0%	Sep 8	Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76960	SS SAP S/4HANA (Finance for Advanced Payment Management) SAP_SE	3.5	0%	Sep 8	Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76959	SS SAP S/4HANA (Finance for Advanced Payment Management) SAP_SE	4.6	0%	Sep 8	Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76958	SI SAP Integration Suite SAP_SE	8.5	0%	Sep 8	XML External Entity (XXE) Vulnerability in SAP Integration Suite
CVE-2026-66768	SN SAP NetWeaver (SAP GUI for Java) SAP_SE	9.0	1%	Sep 8	Improper Access Control in SAP NetWeaver (SAP GUI for Java)
CVE-2026-66767	SN SAP NetWeaver Application Server for ABAP and ABAP Platform SAP_SE	7.7	0%	Sep 8	Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2026-58240	SN SAP NetWeaver (Message Server) SAP_SE	9.8	1%	Sep 8	Missing Authentication check in SAP NetWeaver (Message Server)
CVE-2026-58234	SP SAP Process Integration (SOAP Adapter) SAP_SE	2.2	0%	Sep 8	Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
CVE-2026-44766	SS SAP S/4HANA (Intercompany Matching and Reconciliation) SAP_SE	6.5	0%	Sep 8	SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)
CVE-2026-44756	SE SAP Extended Passport (EPP) Processing SAP_SE	10.0	1%	Sep 8	Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
CVE-2026-66766	SS SAP S/4HANA (Manage Supply Protection) SAP_SE	7.5	1%	Aug 25	Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)
CVE-2026-58231	SC SAP Commerce Cloud (Data Hub Adapter) SAP_SE	10.0	1%	Aug 11	Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
CVE-2026-66779	SN SAP NetWeaver Application Server ABAP SAP_SE	6.3	0%	Aug 11	Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-66778	SB SAP Business AI Platform (Approuter) SAP_SE	5.3	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66777	SB SAP Business AI Platform (Approuter) SAP_SE	5.9	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66776	SB SAP Business AI Platform (Approuter) SAP_SE	5.9	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66775	SB SAP Business AI Platform (Approuter) SAP_SE	4.3	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66774	SB SAP Business AI Platform (Approuter) SAP_SE	3.7	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66773	OD Odata SAP_SE	5.9	0%	Aug 11	Server-controlled `__next` URL is not checking cross-origin
CVE-2026-66772	SB SAP BusinessObjects Business Intelligence Platform (Admin Tools) SAP_SE	4.3	0%	Aug 11	Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)
CVE-2026-66771	SA SAPUI5 SAP_SE	6.1	0%	Aug 11	Cross Site Scripting (XSS) vulnerability in SAPUI5
CVE-2026-66770	SS SAP Social Intelligence SAP_SE	6.3	0%	Aug 11	SQL Injection vulnerability in SAP Social Intelligence
CVE-2026-66764	SS SAP S/4 HANA (Reprocess Bank Statement Items) SAP_SE	4.3	0%	Aug 11	Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)
CVE-2026-66763	SB SAP BusinessObjects Business Intelligence Platform (Central Management Server) SAP_SE	7.9	0%	Aug 11	Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)
CVE-2026-66761	SB SAP Business AI Platform (Approuter) SAP_SE	4.3	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-66760	SB SAP Business AI Platform (Approuter) SAP_SE	6.4	0%	Aug 11	Multiple vulnerabilities in SAP Business AI Platform (Approuter)
CVE-2026-58248	SB SAP BusinessObjects Business Intelligence SAP_SE	6.5	0%	Aug 11	XML External Entity Injection in SAP BusinessObjects Business Intelligence
CVE-2026-58247	SA SAP ABAP Platform SAP_SE	5.3	0%	Aug 11	Memory Corruption vulnerability in SAP ABAP Platform
CVE-2026-58245	SA SAP Advanced Planning and Optimization (Model Mix Planning) SAP_SE	3.8	0%	Aug 11	Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)
CVE-2026-58244	SM SAP Manufacturing Integration and Intelligence SAP_SE	4.3	0%	Aug 11	Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)
CVE-2026-58243	SA SAP ABAP Developer Tools SAP_SE	8.8	0%	Aug 11	Privilege Escalation vulnerability in SAP ABAP Developer Tools
CVE-2026-58241	SN SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard SAP_SE	4.2	0%	Aug 11	Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard)