SAP SE

Products

ProductCVEsExploitedLatest
SAP NetWeaver (Visual Composer development server)22May 13, 2025
SAP Web Dispatcher91Nov 12, 2024
SAP NetWeaver and ABAP Platform71Sep 8, 2026
SAP Content Server31Sep 12, 2023
SAP Solution Manager (User Experience Monitoring)31Dec 9, 2020
SAP NetWeaver AS JAVA (LM Configuration Wizard)21Jul 14, 2020
SAP CRM21Jul 14, 2021
SAP NetWeaver (Visual Composer 7.0 RT)11Sep 14, 2021
SAP Commerce Cloud (virtualjdbc extension)11Aug 14, 2019
SAP 3D Visual Enterprise Viewer127–Nov 8, 2022
SAP BusinessObjects Business Intelligence Platform30–May 12, 2026
SAP 3D Visual Enterprise Author27–Nov 8, 2022
SAP NetWeaver (Enterprise Portal)20–Oct 13, 2026
SAP NetWeaver Application Server for ABAP and ABAP Platform18–Sep 8, 2026
SAP Business One18–Nov 14, 2023
SAP NetWeaver AS ABAP and ABAP Platform16–Jun 9, 2026
SAP Commerce14–Feb 11, 2025
SAP Business Objects Business Intelligence Platform14–Jun 9, 2026
SAP NetWeaver Application Server ABAP14–Aug 11, 2026
SAP Commerce Cloud13–Jul 14, 2026
SAP NetWeaver Application Server ABAP and ABAP Platform13–Aug 11, 2026
SAP NetWeaver Application Server for ABAP13–Jul 28, 2026
SAP NetWeaver Application Server Java12–Feb 10, 2026
SAP GUI FOR WINDOWS12–Nov 11, 2025
SAP Business AI Platform (Approuter)11–Aug 11, 2026
SAP CRM (WebClient UI)10–Jul 14, 2026
SAP Enable Now10–Jul 9, 2024
SAP Financial Consolidation9–May 12, 2026
SAP Host Agent9–Nov 12, 2024
SAP Cloud Connector8–Oct 13, 2026
SAP NetWeaver (ABAP Server) and ABAP Platform8–Jul 8, 2025
SAP Disclosure Management8–Dec 9, 2020
SAP Manufacturing Integration and Intelligence8–Oct 13, 2026
SAP NetWeaver AS ABAP7–Sep 13, 2022
SAP S/4HANA7–Jun 9, 2026
SAP NetWeaver AS JAVA7–Dec 10, 2024
SAP Internet Graphics Service7–Jun 9, 2021
SAP Business Connector7–Jan 13, 2026
SAP Fiori App (Intercompany Balance Reconciliation)6–Jan 27, 2026
SAP Adaptive Server Enterprise6–Feb 9, 2022
SAP Solution Manager5–Dec 9, 2025
SAP Supplier Relationship Management (Live Auction Cockpit)5–May 13, 2025
SAP NetWeaver (Knowledge Management)5–Aug 10, 2021
SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)5–Oct 13, 2026
SAP Fiori (Launchpad)5–Sep 22, 2026
SAP HANA Database5–Jan 13, 2026
SAPCAR5–Jul 8, 2025
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server)5–Jun 9, 2021
SAP NetWeaver5–Sep 9, 2025
SAP CommonCryptoLib4–Nov 11, 2025
SAP Solution Manager (JAVA stack)4–Nov 10, 2020
SAP Contact Center4–Sep 14, 2021
SAP Business Warehouse4–Jan 12, 2021
CLA Assistant4–Oct 13, 2026
SAP Landscape Management4–Jul 9, 2024
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)4–Sep 12, 2023
SAP BusinessObjects Web Intelligence3–Apr 9, 2024
SAP NetWeaver AS for ABAP (RFC Gateway)3–Jun 9, 2021
SAP NetWeaver AS for ABAP and ABAP Platform3–Feb 14, 2023
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)3–Sep 9, 2020
SAP PowerDesigner3–Aug 8, 2023
SAP Process Integration (Integration Builder Framework)3–May 11, 2021
SAP Commerce (Backoffice)3–Feb 11, 2025
SAP Solution Manager (Diagnostics Agent)3–Jul 11, 2023
SAP Business One (SLD)3–Nov 11, 2025
SAP Data Services Management Console3–Aug 11, 2026
SAP Business Planning and Consolidation3–Sep 9, 2025
SAP Solution Manager (Trace Analysis)3–Dec 9, 2020
SAPUI53–Oct 13, 2026
SAP S/4HANA (Finance for Advanced Payment Management)3–Sep 8, 2026
SAP SQL Anywhere3–Jul 11, 2023
SAP NetWeaver (Internet Communication Manager)3–Jan 9, 2024
SAP NetWeaver AS for JAVA (Adobe Document Services)3–Dec 10, 2024
SAP NetWeaver and ABAP Platform (SDCCN)3–Jul 8, 2025
SAP MDM Server3–Jun 10, 2025
SAP Business Client3–Sep 14, 2021
SAP HCM (My Timesheet Fiori 2.0 application)3–Sep 9, 2025
SAP Landscape Transformation3–Apr 14, 2026
SAP ABAP Platform3–Oct 13, 2026
SAP Supplier Relationship Management3–Oct 14, 2025
SAP BusinessObjects Business Intelligence Platform (Web Intelligence)3–Jul 8, 2025
SAP BW/4HANA2–Jan 12, 2021
SAP BusinessObjects Business Intelligence2–Aug 11, 2026
SAP NetWeaver Master Data Management2–Apr 13, 2021
SAP BusinessObjects BI Platform2–Feb 10, 2026
SAP Approuter2–Jul 14, 2026
SAP S/4HANA (Manage Bank Statements)2–Mar 11, 2025
SAP Business Warehouse - Business Planning and Simulation2–Jul 9, 2024
SAP Business Warehouse and SAP Plug-In Basis2–Jul 8, 2025
SAP Customer Data Cloud (Gigya)2–Oct 11, 2022
SAP S/4HANA Core2–Oct 10, 2023
SAP Business One, version for SAP HANA (Cookbooks)2–May 11, 2021
SAP Web Dispatcher and Internet Communication Manager2–Mar 11, 2025
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server2–Sep 8, 2026
SAPSSOEXT2–Sep 12, 2023
SAP Supplier Relationship Management (SICF Handler in SRM Catalog)2–Apr 14, 2026
SAP Supply Chain Management2–Mar 10, 2026
SAP Supplier Relationship Management (Master Data Management Catalog)2–May 13, 2025
SAP Business One (Service Layer)2–Mar 11, 2025
SAP Business Objects Business Intelligence Platform (BI Launchpad)2–Jul 14, 2020
SAP Shared Service Framework2–Aug 13, 2024
SAP S/4HANA (Private Cloud or On-Premise)2–Sep 9, 2025
SAP S/4HANA (Private Cloud and On-Premise)2–Apr 14, 2026
SAP Service Parts Management (SPM)2–May 13, 2025
SAP Solution Tools Plug-In (ST-PI)2–Mar 10, 2026
SAP S/4HANA Finance (Advanced Payment Management)2–Jul 9, 2024
SAP S/4 HANA (Cash Management)2–Apr 9, 2024
SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)2–May 14, 2024
SAP PowerDesigner Client2–Oct 10, 2023
SAP Business Objects Web Intelligence (BI Launchpad)2–Feb 9, 2022
SAP S/4 HANA2–Nov 10, 2020
SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal2–Mar 10, 2026
SAP NetWeaver (SAP Basis)2–Feb 12, 2020
SAP Commerce Cloud (Accelerator Payment Mock)2–Nov 10, 2020
SAP NetWeaver Visual Composer2–Oct 13, 2026
SAP NetWeaver Enterprise Portal (KMC)2–Oct 8, 2024
SAP NetWeaver (Guided Procedures)2–Sep 12, 2023
SAP NetWeaver Enterprise Portal Administration2–Mar 10, 2026
SAP NetWeaver AS for JAVA (HTTP Service)2–Jul 14, 2021
SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad)2–Feb 9, 2021
SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise2–Sep 12, 2023
SAP NetWeaver AS ABAP (Web Dynpro)2–Nov 10, 2020
SAP NetWeaver AS JAVA (User Admin Application)2–Jan 14, 2025
SAP Student Life Cycle Management (SLcM)2–Sep 10, 2024
SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)2–Jul 14, 2026
Kyma2–Dec 14, 2021
SAP NetWeaver and ABAP Platform (Application Server ABAP)2–Feb 10, 2026
SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher)2–Jun 9, 2021
SAP NetWeaver Application Server ABAP (BIC Document)2–Aug 12, 2025
SAP Master Data Governance2–Dec 12, 2023
SAP NetWeaver ABAP Platform2–Sep 9, 2025
Automated Note Search Tool (SAP Basis)2–Feb 12, 2020
SAP LT Replication Server2–Jan 9, 2024
SAP Manufacturing Execution2–Oct 11, 2022
SAP BusinessObjects Business Intelligence Platform (Version Management System)2–Sep 12, 2023
SAP Identity Management2–Jan 13, 2026
SAP Biller Direct2–Dec 12, 2023
SAP Fiori Launchpad (News Tile Application)2–Nov 13, 2020
SAP Focused Run (Simple Diagnostics Agent)2–Apr 12, 2022
SAP Extended Application Services and Runtime (XSA)2–Sep 12, 2023
SAP ERP (SAP_FIN)2–Mar 10, 2020
SAP ERP2–Nov 10, 2020
SAP Banking Services (Generic Market Data)2–Jan 12, 2021
SAP ERP HCM (Portugal)2–Feb 9, 2022
SAP Document Management System2–Feb 10, 2026
SAP Document Builder2–Aug 13, 2024
SAP Business Objects2–Jun 9, 2026
SAP BusinessObjects Business Intelligence Platform (Central management Console)2–Feb 11, 2025
SAP BusinessObjects Business Intelligence Platform (BI Workspace)2–Apr 12, 2022
Business Server Pages Application (TAF_APPLAUNCHER)2–May 12, 2026
SAP Enterprise Threat Detection2–Jan 14, 2022
SAP Landscape Transformation (Analysis Platform)2–Aug 12, 2025
SAP BusinessObjects Business Intelligence Platform (BI LaunchPad)1–Oct 11, 2022
SAP BusinessObjects Business Intelligence platform (Analysis for OLAP)1–Oct 11, 2022
SAP BAM (Bank Account Management)1–Feb 13, 2024
SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder)1–Oct 11, 2022
SAP BusinessObjects Business Intelligence Platform (AdminTools)1–Feb 10, 2026
SAP Authenticator for Android1–Aug 9, 2022
S/4HANA (Manage Purchasing Info Records)1–Mar 11, 2025
SAP BusinessObjects Business Intelligence Platform (Admin Tools)1–Aug 11, 2026
SAP Asset Accounting1–Apr 9, 2024
SAP BusinessObjects Business Intelligence (Installer)1–Aug 8, 2023
SAP BusinessObjects Business Intelligence (BI Workspace)1–Jun 10, 2025
SAP AS NetWeaver JAVA1–May 9, 2023
S/4HANA (Manage Payment Media)1–Feb 24, 2026
Fiori Launchpad1–Mar 8, 2022
SAP BusinessObjects BI Platform (Crystal Report)1–Dec 9, 2020
SAP AS ABAP(DMIS)1–Nov 10, 2020
SAP BusinessObjects BI Platform Central Management Console Promotion Management Application1–Jul 8, 2025
SAP Approuter Node.js package1–Feb 11, 2025
S/4HANA FIN PROD SUBLDGR1–Sep 9, 2020
SAP BusinessObjects Analysis, (edition for OLAP)1–Oct 12, 2021
SAP Business Workflow (WebFlow Services)1–Jul 9, 2024
SAP Business Workflow and SAP Flexible Workflow1–Jan 14, 2025
SAP Business Workflow1–Feb 10, 2026
SAP Application Server for ABAP (BAPI Browser)1–Oct 14, 2025
S4 HANA ABAP (Manage checkbook apps)1–Sep 12, 2023
Fiori app (Manage Payment Blocks)1–Sep 9, 2025
Business Server Pages Application (Product Designer Web UI)1–Jan 13, 2026
SAP Business Warehouse (Service API)1–Mar 10, 2026
SAP Business Warehouse (Process Chains)1–Mar 11, 2025
SAP Application Server for ABAP and SAP NetWeaver RFCSDK1–Jan 13, 2026
SAP Business Warehouse (Business Explorer Web 3.5 loading animation)1–Jul 8, 2025
SAP Application Server ABAP (ST-PI)1–May 12, 2020
ODP Data Replication APIs1–Jun 9, 2026
SAP Business Warehouse (BEx Analyzer)1–Sep 10, 2024
SAP Application Server ABAP for SAP NetWeaver and ABAP Platform1–May 12, 2026
SAP Business Warehouse and SAP BW/4HANA BEx Tools1–Jul 8, 2025
SAP Business Warehouse and SAP BW/4HANA1–Jul 11, 2023
SAP Application Interface Framework (File Adapter)1–Jan 9, 2024
Odata1–Aug 11, 2026
DMIS Mobile Plug-In1–Sep 15, 2021
SAP Business Planning and Consolidation and SAP Business Warehouse1–Apr 14, 2026
SAP Analysis for Microsoft Office1–Sep 14, 2021
SAP Advanced Planning and Optimization (Model Mix Planning)1–Aug 11, 2026
NW AS Java UME User Mapping1–Jan 13, 2026
SAP Digital Manufacturing (Production Operator Dashboard)1–May 13, 2025
SAP Data Services (DQ Report)1–Jul 8, 2025
SAP Data Intelligence1–Aug 12, 2020
SAP Adaptive Server Enterprise (XP Server on Windows Platform)1–May 12, 2020

Exploited and recent CVEs

  • CVE-2025-42999 Critical 9.1 Exploited Insecure Deserialization in SAP NetWeaver (Visual Composer development server) 12.9%
  • CVE-2025-31324 Critical 10.0 Exploited Missing Authorization check in SAP NetWeaver (Visual Composer development server) 99.5%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2021-38163 Critical 9.9 Exploited SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and tri 36.9%
  • CVE-2020-6287 Critical 10.0 Exploited SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configurat 94.7%
  • CVE-2020-6207 Critical 10.0 Exploited SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents 98.1%
  • CVE-2019-0344 Critical 9.8 Exploited Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybr 7.5%
  • CVE-2018-2380 Medium 6.6 Exploited SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are 28.9%
  • CVE-2026-89124 Medium 4.3 Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration) 0.2%
  • CVE-2026-89122 Medium 6.1 Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal 0.1%
  • CVE-2026-89121 Medium 4.7 Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) <0.1%
  • CVE-2026-89120 High 7.1 Missing authorization check in SAP ABAP Platform 0.2%
  • CVE-2026-89118 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal 0.2%
  • CVE-2026-89117 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.2%
  • CVE-2026-89116 Medium 5.9 OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code 0.2%
  • CVE-2026-89113 High 8.8 SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) 0.4%
  • CVE-2026-89112 Medium 6.5 Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure 0.2%
  • CVE-2026-89111 Critical 10.0 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 0.4%
  • CVE-2026-89110 Critical 9.9 Broken Access Control in SAP NetWeaver Visual Composer 0.4%
  • CVE-2026-89108 Critical 9.1 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 0.4%
  • CVE-2026-89107 Critical 9.9 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 0.5%
  • CVE-2026-89106 Medium 4.4 Cross Site Scripting (XSS) vulnerability in SAPUI5 0.1%
  • CVE-2026-89105 Medium 4.2 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library 0.1%
  • CVE-2026-76976 Medium 5.4 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) 0.1%
  • CVE-2026-76975 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay) 0.2%
  • CVE-2026-76972 Medium 6.5 Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence 0.2%
  • CVE-2026-58249 High 7.5 Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 0.4%
  • CVE-2026-58242 Low 3.5 Improper Authorization check in SAP Cloud Connector 0.2%