SAP SE

Products

ProductCVEsExploitedLatest
SAP NetWeaver (Visual Composer development server)22May 13, 2025
SAP Web Dispatcher91Nov 12, 2024
SAP NetWeaver and ABAP Platform71Sep 8, 2026
SAP Content Server31Sep 12, 2023
SAP Solution Manager (User Experience Monitoring)31Dec 9, 2020
SAP NetWeaver AS JAVA (LM Configuration Wizard)21Jul 14, 2020
SAP CRM21Jul 14, 2021
SAP NetWeaver (Visual Composer 7.0 RT)11Sep 14, 2021
SAP Commerce Cloud (virtualjdbc extension)11Aug 14, 2019
SAP 3D Visual Enterprise Viewer127–Nov 8, 2022
SAP BusinessObjects Business Intelligence Platform30–May 12, 2026
SAP 3D Visual Enterprise Author27–Nov 8, 2022
SAP NetWeaver (Enterprise Portal)20–Oct 13, 2026
SAP NetWeaver Application Server for ABAP and ABAP Platform18–Sep 8, 2026
SAP Business One18–Nov 14, 2023
SAP NetWeaver AS ABAP and ABAP Platform16–Jun 9, 2026
SAP Business Objects Business Intelligence Platform14–Jun 9, 2026
SAP NetWeaver Application Server ABAP14–Aug 11, 2026
SAP Commerce14–Feb 11, 2025
SAP NetWeaver Application Server ABAP and ABAP Platform13–Aug 11, 2026
SAP Commerce Cloud13–Jul 14, 2026
SAP NetWeaver Application Server for ABAP13–Jul 28, 2026
SAP NetWeaver Application Server Java12–Feb 10, 2026
SAP GUI FOR WINDOWS12–Nov 11, 2025
SAP Business AI Platform (Approuter)11–Aug 11, 2026
SAP CRM (WebClient UI)10–Jul 14, 2026
SAP Enable Now10–Jul 9, 2024
SAP Financial Consolidation9–May 12, 2026
SAP Host Agent9–Nov 12, 2024
SAP NetWeaver (ABAP Server) and ABAP Platform8–Jul 8, 2025
SAP Cloud Connector8–Oct 13, 2026
SAP Manufacturing Integration and Intelligence8–Oct 13, 2026
SAP Disclosure Management8–Dec 9, 2020
SAP NetWeaver AS JAVA7–Dec 10, 2024
SAP S/4HANA7–Jun 9, 2026
SAP Business Connector7–Jan 13, 2026
SAP Internet Graphics Service7–Jun 9, 2021
SAP NetWeaver AS ABAP7–Sep 13, 2022
SAP Fiori App (Intercompany Balance Reconciliation)6–Jan 27, 2026
SAP Adaptive Server Enterprise6–Feb 9, 2022
SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)5–Oct 13, 2026
SAP Solution Manager5–Dec 9, 2025
SAP NetWeaver5–Sep 9, 2025
SAP HANA Database5–Jan 13, 2026
SAP Fiori (Launchpad)5–Sep 22, 2026
SAP NetWeaver (Knowledge Management)5–Aug 10, 2021
SAP Supplier Relationship Management (Live Auction Cockpit)5–May 13, 2025
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server)5–Jun 9, 2021
SAPCAR5–Jul 8, 2025
CLA Assistant4–Oct 13, 2026
SAP CommonCryptoLib4–Nov 11, 2025
SAP Solution Manager (JAVA stack)4–Nov 10, 2020
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)4–Sep 12, 2023
SAP Landscape Management4–Jul 9, 2024
SAP Contact Center4–Sep 14, 2021
SAP Business Warehouse4–Jan 12, 2021
SAP NetWeaver (Internet Communication Manager)3–Jan 9, 2024
SAP NetWeaver AS for ABAP and ABAP Platform3–Feb 14, 2023
SAPUI53–Oct 13, 2026
SAP MDM Server3–Jun 10, 2025
SAP SQL Anywhere3–Jul 11, 2023
SAP NetWeaver AS for ABAP (RFC Gateway)3–Jun 9, 2021
SAP NetWeaver AS for JAVA (Adobe Document Services)3–Dec 10, 2024
SAP Supplier Relationship Management3–Oct 14, 2025
SAP Solution Manager (Diagnostics Agent)3–Jul 11, 2023
SAP Business One (SLD)3–Nov 11, 2025
SAP Process Integration (Integration Builder Framework)3–May 11, 2021
SAP Solution Manager (Trace Analysis)3–Dec 9, 2020
SAP S/4HANA (Finance for Advanced Payment Management)3–Sep 8, 2026
SAP Commerce (Backoffice)3–Feb 11, 2025
SAP Data Services Management Console3–Aug 11, 2026
SAP BusinessObjects Business Intelligence Platform (Web Intelligence)3–Jul 8, 2025
SAP HCM (My Timesheet Fiori 2.0 application)3–Sep 9, 2025
SAP PowerDesigner3–Aug 8, 2023
SAP ABAP Platform3–Oct 13, 2026
SAP Business Planning and Consolidation3–Sep 9, 2025
SAP BusinessObjects Web Intelligence3–Apr 9, 2024
SAP Landscape Transformation3–Apr 14, 2026
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface)3–Sep 9, 2020
SAP Business Client3–Sep 14, 2021
SAP NetWeaver and ABAP Platform (SDCCN)3–Jul 8, 2025
SAP BusinessObjects Business Intelligence2–Aug 11, 2026
SAP Business Objects2–Jun 9, 2026
SAP Business One (Service Layer)2–Mar 11, 2025
SAP NetWeaver (SAP Basis)2–Feb 12, 2020
SAP Supply Chain Management2–Mar 10, 2026
SAP NetWeaver AS JAVA (User Admin Application)2–Jan 14, 2025
SAP Supplier Relationship Management (SICF Handler in SRM Catalog)2–Apr 14, 2026
SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)2–May 14, 2024
SAP Business Objects Business Intelligence Platform (BI Launchpad)2–Jul 14, 2020
SAP Manufacturing Execution2–Oct 11, 2022
SAP Customer Data Cloud (Gigya)2–Oct 11, 2022
SAP Business Objects Web Intelligence (BI Launchpad)2–Feb 9, 2022
SAP NetWeaver (Guided Procedures)2–Sep 12, 2023
SAP NetWeaver Application Server ABAP (BIC Document)2–Aug 12, 2025
SAP S/4HANA (Private Cloud or On-Premise)2–Sep 9, 2025
SAP Master Data Governance2–Dec 12, 2023
SAP Business Warehouse - Business Planning and Simulation2–Jul 9, 2024
SAP S/4HANA (Manage Bank Statements)2–Mar 11, 2025
SAP Student Life Cycle Management (SLcM)2–Sep 10, 2024
SAP Web Dispatcher and Internet Communication Manager2–Mar 11, 2025
SAP BW/4HANA2–Jan 12, 2021
SAP Business Warehouse and SAP Plug-In Basis2–Jul 8, 2025
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server2–Sep 8, 2026
SAP BusinessObjects Business Intelligence Platform (Central management Console)2–Feb 11, 2025
Business Server Pages Application (TAF_APPLAUNCHER)2–May 12, 2026
SAP Landscape Transformation (Analysis Platform)2–Aug 12, 2025
SAP S/4 HANA (Cash Management)2–Apr 9, 2024
SAP BusinessObjects BI Platform2–Feb 10, 2026
SAP PowerDesigner Client2–Oct 10, 2023
SAP Business One, version for SAP HANA (Cookbooks)2–May 11, 2021
SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher)2–Jun 9, 2021
SAP NetWeaver AS for JAVA (HTTP Service)2–Jul 14, 2021
SAP Document Management System2–Feb 10, 2026
SAP Commerce Cloud (Accelerator Payment Mock)2–Nov 10, 2020
SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)2–Jul 14, 2026
SAP NetWeaver Enterprise Portal Administration2–Mar 10, 2026
SAP Banking Services (Generic Market Data)2–Jan 12, 2021
Automated Note Search Tool (SAP Basis)2–Feb 12, 2020
SAP Shared Service Framework2–Aug 13, 2024
SAP Focused Run (Simple Diagnostics Agent)2–Apr 12, 2022
SAP S/4HANA Finance (Advanced Payment Management)2–Jul 9, 2024
Kyma2–Dec 14, 2021
SAP Identity Management2–Jan 13, 2026
SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad)2–Feb 9, 2021
SAP S/4 HANA2–Nov 10, 2020
SAP NetWeaver AS ABAP (Web Dynpro)2–Nov 10, 2020
SAP Solution Tools Plug-In (ST-PI)2–Mar 10, 2026
SAP LT Replication Server2–Jan 9, 2024
SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal2–Mar 10, 2026
SAPSSOEXT2–Sep 12, 2023
SAP NetWeaver ABAP Platform2–Sep 9, 2025
SAP BusinessObjects Business Intelligence Platform (Version Management System)2–Sep 12, 2023
SAP Approuter2–Jul 14, 2026
SAP Service Parts Management (SPM)2–May 13, 2025
SAP BusinessObjects Business Intelligence Platform (BI Workspace)2–Apr 12, 2022
SAP ERP HCM (Portugal)2–Feb 9, 2022
SAP S/4HANA Core2–Oct 10, 2023
SAP NetWeaver and ABAP Platform (Application Server ABAP)2–Feb 10, 2026
SAP Biller Direct2–Dec 12, 2023
SAP Enterprise Threat Detection2–Jan 14, 2022
SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise2–Sep 12, 2023
SAP NetWeaver Enterprise Portal (KMC)2–Oct 8, 2024
SAP Extended Application Services and Runtime (XSA)2–Sep 12, 2023
SAP NetWeaver Visual Composer2–Oct 13, 2026
SAP Document Builder2–Aug 13, 2024
SAP NetWeaver Master Data Management2–Apr 13, 2021
SAP Fiori Launchpad (News Tile Application)2–Nov 13, 2020
SAP ERP2–Nov 10, 2020
SAP Supplier Relationship Management (Master Data Management Catalog)2–May 13, 2025
SAP S/4HANA (Private Cloud and On-Premise)2–Apr 14, 2026
SAP ERP (SAP_FIN)2–Mar 10, 2020
SAP BusinessObjects Business Intelligence Platform (Program Objects)1–Oct 11, 2022
SAP CRM ABAP (Insights Management)1–Aug 13, 2024
SAP BusinessObjects Intelligence Platform1–May 9, 2023
SAP HANA Cockpit and HANA Database Explorer1–Apr 14, 2026
SAP NetWeaver Process Integration1–Aug 8, 2023
SAP HCM1–Dec 10, 2024
SAP Financials1–Jun 14, 2022
SAP NetWeaver Application Server ABAP (POWL test application)1–Oct 15, 2020
SAP NetWeaver AS ABAP (SAP GUI for HTML within the Fiori Launchpad)1–Sep 13, 2022
SAP NetWeaver AS ABAP and ABAP Platform (SRM_RFC_SUBMIT_REPORT)1–Jun 9, 2021
SAP ABA (Application Basis)1–Feb 13, 2024
SAP NetWeaver (ABAP and Java application Servers)1–Feb 9, 2022
SAP S/4HANA eProcurement1–Sep 10, 2024
SAP Fiori apps (Posting Library)1–Mar 11, 2025
SAP BI Platform1–Sep 23, 2025
SAP ERP (Statutory Reporting for Insurance Companies)1–Jun 10, 2020
SAP S/4 HANA (Financial Products Subledger and Banking Services) (S4FPSL)1–Apr 14, 2020
SAP NetWeaver (EP Web Page Composer)1–Jun 13, 2022
SAP Landscape Transformation (PCL Basis)1–May 13, 2025
SAP Asset Accounting1–Apr 9, 2024
SAP Fiori Apps 2.0 for Travel Management in SAP ERP1–Apr 13, 2021
SAP NetWeaver and ABAP Platform (Service Data Collection)1–Apr 8, 2025
SAP NetWeaver AS JAVA (XML Forms)1–Sep 9, 2020
SAP Companion1–Feb 13, 2024
SAP Commerce Cloud (OOTB Code)1–Oct 13, 2026
SAP Replication Server1–May 14, 2024
sap-xssec1–Dec 12, 2023
SAP NetWeaver (remote service for Xcelsius)1–Dec 9, 2025
SAP BusinessObjects Business Intelligence (BI Workspace)1–Jun 10, 2025
SAP KMC WPC1–Apr 8, 2025
SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_UI)1–May 12, 2020
SAP Production and Revenue Accounting (Tobin interface)1–Sep 10, 2024
SAP Extended Passport (EPP) Processing1–Sep 8, 2026
S/4HANA (Manage Payment Media)1–Feb 24, 2026
SAP S/4HANA (Supplier invoice)1–Aug 12, 2025
SAP jConnect - SDK for ASE1–Dec 9, 2025
SAP BusinessObjects Business Intelligence Platform (Commentary DB)1–Sep 13, 2022
SAP Business Warehouse and SAP BW/4HANA BEx Tools1–Jul 8, 2025
SAP Business Objects Business Intelligence Platform (PMW)1–May 13, 2025
SAP Just In Time1–Mar 11, 2025
SAP S/4HANA (Manage Central Purchase Contract application)1–Jun 10, 2025
SAP Business Objects Business Intelligence Platform (Live Data Connect)1–May 12, 2020
Material Master Application1–Apr 14, 2026
SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)1–Oct 13, 2026
SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager)1–Oct 15, 2020
SAP NetWeaver (Knowledge Management) (KMC-WPC)1–Apr 14, 2020
SAP ERP (HCM Travel Management)1–Aug 12, 2020
SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)1–Sep 8, 2023

Exploited and recent CVEs

  • CVE-2025-42999 Critical 9.1 Exploited Insecure Deserialization in SAP NetWeaver (Visual Composer development server) 12.9%
  • CVE-2025-31324 Critical 10.0 Exploited Missing Authorization check in SAP NetWeaver (Visual Composer development server) 99.5%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2022-22536 Critical 9.8 Exploited SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenati 97.9%
  • CVE-2021-38163 Critical 9.9 Exploited SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and tri 36.9%
  • CVE-2020-6287 Critical 10.0 Exploited SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configurat 94.7%
  • CVE-2020-6207 Critical 10.0 Exploited SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents 98.1%
  • CVE-2019-0344 Critical 9.8 Exploited Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybr 7.5%
  • CVE-2018-2380 Medium 6.6 Exploited SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are 28.9%
  • CVE-2026-89124 Medium 4.3 Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration) 0.2%
  • CVE-2026-89122 Medium 6.1 Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal 0.1%
  • CVE-2026-89121 Medium 4.7 Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) <0.1%
  • CVE-2026-89120 High 7.1 Missing authorization check in SAP ABAP Platform 0.2%
  • CVE-2026-89118 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal 0.2%
  • CVE-2026-89117 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.2%
  • CVE-2026-89116 Medium 5.9 OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code 0.2%
  • CVE-2026-89113 High 8.8 SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) 0.4%
  • CVE-2026-89112 Medium 6.5 Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure 0.2%
  • CVE-2026-89111 Critical 10.0 OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 0.4%
  • CVE-2026-89110 Critical 9.9 Broken Access Control in SAP NetWeaver Visual Composer 0.4%
  • CVE-2026-89108 Critical 9.1 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service) 0.4%
  • CVE-2026-89107 Critical 9.9 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) 0.5%
  • CVE-2026-89106 Medium 4.4 Cross Site Scripting (XSS) vulnerability in SAPUI5 0.1%
  • CVE-2026-89105 Medium 4.2 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library 0.1%
  • CVE-2026-76976 Medium 5.4 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) 0.1%
  • CVE-2026-76975 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay) 0.2%
  • CVE-2026-76972 Medium 6.5 Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence 0.2%
  • CVE-2026-58249 High 7.5 Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) 0.4%
  • CVE-2026-58242 Low 3.5 Improper Authorization check in SAP Cloud Connector 0.2%