CVEs we hold for Sap
Records whose assigning authority named Sap as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-76977Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)SAP_SE SAPUI5(Frame Options Allowlist)
CVE-2026-76971Server-Side Request Forgery in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-76969Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)SAP_SE SAP Cloud Application Programming Model (CAP)
CVE-2026-76968Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerSAP_SE SAP Web Dispatcher, Internet Communication Manager…
CVE-2026-76967Insecure Deserialization in SAP NetWeaver Business ClientSAP_SE SAP NetWeaver Business Client
CVE-2026-76963Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
CVE-2026-76962Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)SAP_SE SAP S/4HANA (Manage Bank Chains app)
CVE-2026-76961Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76960Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76959Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA (Finance for Advanced Payment Management)
CVE-2026-76958XML External Entity (XXE) Vulnerability in SAP Integration SuiteSAP_SE SAP Integration Suite
CVE-2026-66779Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66776Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66775Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66774Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66772Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)SAP_SE SAP BusinessObjects Business Intelligence Platform…
CVE-2026-66768Improper Access Control in SAP NetWeaver (SAP GUI for Java)SAP_SE SAP NetWeaver (SAP GUI for Java)
CVE-2026-66767Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP…
CVE-2026-66766Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)SAP_SE SAP S/4HANA (Manage Supply Protection)
CVE-2026-66764Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)SAP_SE SAP S/4 HANA (Reprocess Bank Statement Items)
CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)SAP_SE SAP BusinessObjects Business Intelligence Platform…
CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business IntelligenceSAP_SE SAP BusinessObjects Business Intelligence
CVE-2026-58246Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP
CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)SAP_SE SAP Advanced Planning and Optimization (Model Mix…
CVE-2026-58244Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)SAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-58243Privilege Escalation vulnerability in SAP ABAP Developer ToolsSAP_SE SAP ABAP Developer Tools
CVE-2026-58241Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport…SAP_SE SAP NetWeaver and ABAP Platform (Change and…
CVE-2026-58240Missing Authentication check in SAP NetWeaver (Message Server)SAP_SE SAP NetWeaver (Message Server)
CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-58236OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP…
CVE-2026-58235Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)SAP_SE SAP NetWeaver AS Java (Adobe Document Services)
CVE-2026-58234Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)SAP_SE SAP Process Integration (SOAP Adapter)
CVE-2026-58233Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)SAP_SE SAP Change and Transport System Attach Tool…
CVE-2026-58231Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)SAP_SE SAP Commerce Cloud (Data Hub Adapter)
CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform (Approuter)
CVE-2026-44771Missing Authorization check in SAP S/4HANA (Draft operation)SAP_SE SAP S/4HANA (Draft operation)
CVE-2026-44770Missing Authorization check in SAP S/4 HANA (Create Single Payment)SAP_SE SAP S/4 HANA (Create Single Payment)
CVE-2026-44769SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)SAP_SE SAP S/4HANA Project Management (PPM-PRO)
CVE-2026-44767Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS InjectionSAP_SE @ui5/webcomponents-base
CVE-2026-44766SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)SAP_SE SAP S/4HANA (Intercompany Matching and…
CVE-2026-44765Missing Authorization Check in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-44764Missing Authorization Check in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-44763Directory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-44762Security Misconfiguration in SAP Data Services Management ConsoleSAP_SE SAP Data Services Management Console
CVE-2026-44760Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business…SAP_SE SAP NetWeaver Application Server ABAP (applications…
CVE-2026-44759Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
CVE-2026-44758Code Injection vulnerability in Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
CVE-2026-44757Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise ManagerSAP_SE SAP Wily Introscope Enterprise Manager
CVE-2026-44756Memory Corruption vulnerability in SAP Extended Passport (EPP) ProcessingSAP_SE SAP Extended Passport (EPP) Processing
CVE-2026-44755Email Spoofing vulnerability in SAP Business Objects Business Intelligence PlatformSAP_SE SAP Business Objects Business Intelligence Platform
CVE-2026-44754Missing caller identification check-in for ODP Data Replication APIsSAP_SE ODP Data Replication APIs
CVE-2026-44753Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)SAP_SE SAP HANA Extended Application Services classic model…
CVE-2026-44752Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)SAP_SE SAP NetWeaver Application Server Java(Configuration…
CVE-2026-44751Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-44750Missing Authorization check in SAP MDG (Review Match Groups Application)SAP_SE SAP MDG (Review Match Groups Application)
CVE-2026-44748XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-44747Memory Corruption vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
CVE-2026-44746Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)SAP_SE SAP NetWeaver AS Java (JDBC Test Servlet)
CVE-2026-44743Security Misconfiguration vulnerability in SAP Business ObjectsSAP_SE SAP Business Objects
CVE-2026-40137Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)SAP_SE Business Server Pages Application (TAF_APPLAUNCHER)
CVE-2026-40136Denial of service (DoS) in SAP Financial ConsolidationSAP_SE SAP Financial Consolidation
CVE-2026-40135OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP…
CVE-2026-40134Missing Authorization Check in SAP Incentive and Commission ManagementSAP_SE SAP Incentive and Commission Management
CVE-2026-40133Missing Authorization check in SAP S/4HANA Condition MaintenanceSAP_SE SAP S/4HANA Condition Maintenance
CVE-2026-40132Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard)SAP_SE SAP Strategic Enterprise Management (BSP application…
CVE-2026-40131SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy librarySAP_SE SAP HANA Deployment Infrastructure (HDI) deploy…
CVE-2026-40129Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP PlatformSAP_SE SAP Application Server ABAP for SAP NetWeaver and…
CVE-2026-40128Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)SAP_SE SAP NetWeaver Application Server Java (Web Container)
CVE-2026-34265Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
CVE-2026-34264Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANASAP_SE SAP Human Capital Management for SAP S/4HANA
CVE-2026-34263Missing authentication check in SAP Commerce cloud configurationSAP_SE SAP Commerce cloud configuration
CVE-2026-34262Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database ExplorerSAP_SE SAP HANA Cockpit and HANA Database Explorer
CVE-2026-34261Missing Authorization check in SAP Business Analytics and SAP Content ManagementSAP_SE SAP Business Analytics and SAP Content Management
CVE-2026-34260SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP)SAP_SE SAP S/4HANA (SAP Enterprise Search for ABAP)
CVE-2026-34259OS Command Injection Vulnerability in SAP Forecasting & ReplenishmentSAP_SE SAP Forecasting & Replenishment
CVE-2026-34257Open Redirect vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
CVE-2026-34256Missing Authorization check in SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)SAP_SE SAP ERP and SAP S/4 HANA (Private Cloud and…
CVE-2026-2943SapneshNaik Student Management System index.php cross site scriptingSapneshNaik Student Management System
CVE-2026-27689Denial of service (DOS) in SAP Supply Chain ManagementSAP_SE SAP Supply Chain Management
CVE-2026-27688Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
CVE-2026-27687Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalSAP_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
CVE-2026-27686Missing Authorization check in SAP Business Warehouse (Service API)SAP_SE SAP Business Warehouse (Service API)
CVE-2026-27685Insecure Deserialization in SAP NetWeaver Enterprise Portal AdministrationSAP_SE SAP NetWeaver Enterprise Portal Administration
CVE-2026-27684SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification)SAP_SE SAP NetWeaver (Feedback Notification)
CVE-2026-27683Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
CVE-2026-27682Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on…SAP_SE SAP NetWeaver Application Server ABAP (Applications…
CVE-2026-27681SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business WarehouseSAP_SE SAP Business Planning and Consolidation and SAP…
CVE-2026-27680CSS Injection vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
CVE-2026-27679Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)SAP_SE SAP S/4HANA Frontend OData Service (Manage Reference…
CVE-2026-27678Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures)SAP_SE SAP S/4HANA Backend OData Service (Manage Reference…
CVE-2026-27677Missing Authorization check in SAP S/4HANA OData Service (Manage Reference Equipment)SAP_SE SAP S/4HANA OData Service (Manage Reference…
CVE-2026-27676Missing Authorization check in SAP S/4HANA OData Service (Manage Technical Object Structures)SAP_SE SAP S/4HANA OData Service (Manage Technical Object…
CVE-2026-27675Code Injection vulnerability in SAP Landscape TransformationSAP_SE SAP Landscape Transformation
CVE-2026-27674Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)SAP_SE SAP NetWeaver Application Server Java (Web Dynpro…
CVE-2026-27673Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)SAP_SE SAP S/4HANA (Private Cloud and On-Premise)
CVE-2026-27672Missing Authorization check in Material Master ApplicationSAP_SE Material Master Application
CVE-2026-27671Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-24328Open Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)SAP_SE Business Server Pages Application (TAF_APPLAUNCHER)
CVE-2026-24327Missing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application)SAP_SE SAP Strategic Enterprise Management (Balanced…
CVE-2026-24326Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)SAP_SE SAP S/4HANA Defense & Security (Disconnected…
CVE-2026-24325Cross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console)SAP_SE SAP BusinessObjects Enterprise (Central Management…
CVE-2026-24324Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)SAP_SE SAP BusinessObjects Business Intelligence Platform…
CVE-2026-24323Multiple vulnerabilities in BSP Applications of SAP Document Management SystemSAP_SE SAP Document Management System
CVE-2026-24322Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)SAP_SE SAP Solution Tools Plug-In (ST-PI)
CVE-2026-24320Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE SAP NetWeaver and ABAP Platform (Application Server…
CVE-2026-24319Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)SAP_SE SAP Business One (B1 Client Memory Dump Files)
CVE-2026-24318Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
CVE-2026-24317DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXTSAP_SE SAP GUI for Windows with active GuiXT
CVE-2026-24316Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
CVE-2026-24314Information Disclosure vulnerability in S/4HANA (Manage Payment Media)SAP_SE S/4HANA (Manage Payment Media)
CVE-2026-24313Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)SAP_SE SAP Solution Tools Plug-In (ST-PI)
CVE-2026-24311Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0SAP_SE SAP Customer Checkout 2.0
CVE-2026-24310Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
CVE-2026-24309Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
CVE-2026-23689Denial of service (DOS) in SAP Supply Chain ManagementSAP_SE SAP Supply Chain Management
CVE-2026-23688Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)SAP_SE SAP Fiori App (Manage Service Entry Sheets - Lean…
CVE-2026-23687XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-23686CRLF Injection vulnerability in SAP NetWeaver Application Server JavaSAP_SE SAP NetWeaver Application Server Java
CVE-2026-23685Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)SAP_SE SAP NetWeaver (JMS service)
CVE-2026-23683Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-23681Missing Authorization check in a function module in SAP Support Tools Plug-InSAP_SE SAP Support Tools Plug-In
CVE-2026-0514Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
CVE-2026-0513Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)SAP_SE SAP Supplier Relationship Management (SICF Handler…
CVE-2026-0512Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)SAP_SE SAP Supplier Relationship Management (SICF Handler…
CVE-2026-0511Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-0510Obsolete Encryption Algorithm Used in NW AS Java UME User MappingSAP_SE NW AS Java UME User Mapping
CVE-2026-0509Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP…
CVE-2026-0508Open Redirect vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
CVE-2026-0507OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDKSAP_SE SAP Application Server for ABAP and SAP NetWeaver…
CVE-2026-0506Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP…
CVE-2026-0505Multiple vulnerabilities in BSP Applications of SAP Document Management SystemSAP_SE SAP Document Management System
CVE-2026-0504Insufficient Input Handling in JNDI Operations of SAP Identity ManagementSAP_SE SAP Identity Management
CVE-2026-0503Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)SAP_SE SAP ERP Central Component and SAP S/4HANA (SAP EHS…
CVE-2026-0502Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
CVE-2026-0501SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)SAP_SE SAP S/4HANA Private Cloud and On-Premise (Financials…
CVE-2026-0500Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)SAP_SE SAP Wily Introscope Enterprise Manager (WorkStation)
CVE-2026-0499Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
CVE-2026-0498Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)SAP_SE SAP S/4HANA (Private Cloud and On-Premise)
CVE-2026-0497Missing Authorization check in Business Server Pages Application (Product Designer Web UI)SAP_SE Business Server Pages Application (Product Designer…
CVE-2026-0496Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-0495Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-0494Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-0493Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App (Intercompany Balance Reconciliation)
CVE-2026-0491Code Injection vulnerability in SAP Landscape TransformationSAP_SE SAP Landscape Transformation
CVE-2026-0490Denial of service (DOS) in SAP BusinessObjects BI PlatformSAP_SE SAP BusinessObjects BI Platform
CVE-2026-0489DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)SAP_SE SAP Business One (Job Service)
CVE-2026-0488Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)SAP_SE SAP CRM and SAP S/4HANA (Scripting Editor)
CVE-2026-0487DLL Hijacking vulnerability in SAProuter on Microsoft WindowsSAP_SE SAProuter on Microsoft Windows
CVE-2026-0485Denial of service (DOS) vulnerability in SAP BusinessObjects BI PlatformSAP_SE SAP BusinessObjects BI Platform
CVE-2026-0484Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANASAP_SE SAP NetWeaver Application Server ABAP and SAP S/4HANA
CVE-2025-57753vite-plugin-static-copy files not included in `src` are accessible with a crafted requestsapphi-red vite-plugin-static-copy
CVE-2025-53462WordPress SAPO Feed plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerabilitySAPO Feed
CVE-2025-43011Missing Authorization Check in SAP Landscape Transformation (PCL Basis)SAP_SE SAP Landscape Transformation (PCL Basis)
CVE-2025-43010Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))SAP_SE SAP S/4HANA Cloud Private Edition or on Premise (SCM…
CVE-2025-43009Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management (SPM)
CVE-2025-43008Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalSAP_SE SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
CVE-2025-43007Missing Authorization check in SAP Service Parts Management (SPM)SAP_SE SAP Service Parts Management (SPM)
CVE-2025-43006Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)SAP_SE SAP Supplier Relationship Management (Master Data…
CVE-2025-43004Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)SAP_SE SAP Digital Manufacturing (Production Operator…
CVE-2025-43003Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)SAP_SE SAP S/4HANA (Private Cloud & On-Premise)
CVE-2025-43002Missing Authorization check in SAP S4/HANA (OData meta-data property)SAP_SE SAP S4/HANA (OData meta-data property)
CVE-2025-43000Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)SAP_SE SAP Business Objects Business Intelligence Platform…
CVE-2025-42999Insecure Deserialization in SAP NetWeaver (Visual Composer development server)SAP_SE SAP NetWeaver (Visual Composer development server)
CVE-2025-42998Security misconfiguration vulnerability in SAP Business One Integration FrameworkSAP_SE SAP Business One Integration Framework
CVE-2025-42993Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)SAP_SE SAP S/4HANA (Enterprise Event Enablement)
CVE-2025-42991Missing Authorization check in SAP S/4HANA (Bank Account Application)SAP_SE SAP S/4HANA (Bank Account Application)
200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.