SA
Vendor
Sap
1,849
CVEs
25
On KEV
0
New 30D
Products
NE10.0
NetWeaver
SAP
109 CVEs10 on KEV0 new
NA10.0
Netweaver Application Server Java
Sap
70 CVEs7 on KEV0 new
NA10.0
Netweaver Application Server Abap
Sap
86 CVEs1 on KEV0 new
SM10.0
Solution Manager
SAP
33 CVEs1 on KEV0 new
CC9.8
Commerce Cloud
SAP
20 CVEs1 on KEV0 new
WD10.0
Web Dispatcher
Sap
12 CVEs1 on KEV0 new
CR8.8
Customer Relationship Management
Sap
10 CVEs1 on KEV0 new
CS10.0
Content Server
Sap
6 CVEs1 on KEV0 new
CR6.6
Customer Relationship Management (CRM)
SAP
1 CVEs1 on KEV0 new
MP10.0
Multiple Products
SAP
1 CVEs1 on KEV0 new
3V8.8
3d Visual Enterprise Viewer
Sap
131 CVEs0 on KEV0 new
BB9.8
Businessobjects Business Intelligence Platform
Sap
73 CVEs0 on KEV0 new
BB9.9
Businessobjects Business Intelligence
Sap
45 CVEs0 on KEV0 new
HA9.8
Hana
Sap
38 CVEs0 on KEV0 new
BO9.8
Business One
Sap
31 CVEs0 on KEV0 new
IG9.8
Internet Graphics Server
Sap
28 CVEs0 on KEV0 new
3V7.8
3d Visual Enterprise Author
Sap
27 CVEs0 on KEV0 new
BU9.8
Businessobjects
Sap
23 CVEs0 on KEV0 new
NA9.8
Netweaver Abap
Sap
21 CVEs0 on KEV0 new
NP9.4
Netweaver Process Integration
Sap
21 CVEs0 on KEV0 new
NE6.5
Netweaver Enterprise Portal
Sap
20 CVEs0 on KEV0 new
BO9.8
Business Objects Business Intelligence Platform
Sap
19 CVEs0 on KEV0 new
HE8.1
Hana Extended Application Services
Sap
18 CVEs0 on KEV0 new
SB9.0
Sap Basis
Sap
18 CVEs0 on KEV0 new
S49.9
S/4hana
Sap
17 CVEs0 on KEV0 new
DM9.8
Disclosure Management
Sap
16 CVEs0 on KEV0 new
HA9.8
Host Agent
Sap
15 CVEs0 on KEV0 new
AS8.8
Adaptive Server Enterprise
Sap
14 CVEs0 on KEV0 new
EN9.8
Enable Now
Sap
14 CVEs0 on KEV0 new
AP9.1
Approuter
Sap
13 CVEs0 on KEV0 new
S49.1
S4core
Sap
13 CVEs0 on KEV0 new
AP9.8
Abap Platform
Sap
12 CVEs0 on KEV0 new
CR7.7
Customer Relationship Management Webclient UI
Sap
12 CVEs0 on KEV0 new
NA9.8
Netweaver AS Abap
Sap
12 CVEs0 on KEV0 new
SD–
Sap DB
Sap
12 CVEs0 on KEV0 new
SK8.8
Sap Kernel
Sap
11 CVEs0 on KEV0 new
SW–
Sap Web Application Server
Sap
11 CVEs0 on KEV0 new
SR9.8
Supplier Relationship Management
Sap
11 CVEs0 on KEV0 new
CO9.9
Commerce
Sap
10 CVEs0 on KEV0 new
NA6.5
Netweaver AS Abap Business Server Pages
Sap
10 CVEs0 on KEV0 new
IT6.1
Internet Transaction Server
Sap
9 CVEs0 on KEV0 new
NA9.8
Netweaver Application Server For Java
Sap
9 CVEs0 on KEV0 new
CC9.8
Cloud Connector
Sap
8 CVEs0 on KEV0 new
HD9.8
Hana Database
Sap
8 CVEs0 on KEV0 new
HY8.6
Hybris
Sap
8 CVEs0 on KEV0 new
LM9.8
Landscape Management
Sap
8 CVEs0 on KEV0 new
MA7.2
Maxdb
Sap
8 CVEs0 on KEV0 new
MP7.5
Mobile Platform
Sap
8 CVEs0 on KEV0 new
RL–
Rfc Library
Sap
8 CVEs0 on KEV0 new
SA9.8
Sql Anywhere
Sap
8 CVEs0 on KEV0 new
TR9.8
Trex
Sap
8 CVEs0 on KEV0 new
AF9.1
Afaria
Sap
7 CVEs0 on KEV0 new
BC6.8
Business Connector
Sap
7 CVEs0 on KEV0 new
BW9.9
Business Warehouse
Sap
7 CVEs0 on KEV0 new
CR9.8
Crystal Reports
Sap
7 CVEs0 on KEV0 new
NA5.9
Netweaver AS Internet Graphics Server
Sap
7 CVEs0 on KEV0 new
SH8.8
S/4 Hana
Sap
7 CVEs0 on KEV0 new
SA9.1
Sapscore
Sap
7 CVEs0 on KEV0 new
BA8.8
Basis
Sap
6 CVEs0 on KEV0 new
BA8.8
Business Application Software Integrated Solution
Sap
6 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-66778 | AP Approuter Sap | 5.3 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66777 | AP Approuter Sap | 5.9 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66776 | AP Approuter Sap | 5.9 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66775 | AP Approuter Sap | 4.3 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66774 | AP Approuter Sap | 3.7 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66761 | AP Approuter Sap | 4.3 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-66760 | AP Approuter Sap | 6.4 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-58239 | AP Approuter Sap | 3.7 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-58238 | AP Approuter Sap | 5.9 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-58237 | AP Approuter Sap | 5.9 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-58230 | AP Approuter Sap | 7.0 | Aug 11 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) |
| CVE-2026-44745 | AP Approuter Sap | 8.1 | Jul 14 | Open Redirect vulnerability in SAP Approuter |
| CVE-2026-27690 | AP Approuter Sap | 9.1 | Jul 14 | HTTP Request Smuggling in SAP Approuter |
| CVE-2026-27680 | NA Netweaver Application Server Abap Sap | 4.3 | May 14 | CSS Injection vulnerability in SAP NetWeaver Application Server ABAP |
| CVE-2026-40135 | NA Netweaver Application Server Abap Sap | 6.5 | May 12 | OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform |
| CVE-2026-27682 | NA Netweaver Application Server Abap Sap | 6.1 | May 12 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) |
| CVE-2026-34264 | HC Human Capital Management Sap | 6.5 | Apr 14 | Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA |
| CVE-2026-34262 | HC Hana Cockpit Sap | 4.3 | Apr 14 | Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer |
| CVE-2026-34257 | NA Netweaver Application Server Abap Sap | 6.1 | Apr 14 | Open Redirect vulnerability in SAP NetWeaver Application Server ABAP |
| CVE-2026-27679 | MR Manage Reference Structures Sap | 6.5 | Apr 14 | Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures) |
| CVE-2026-27674 | NA Netweaver Application Server Java Sap | 6.1 | Apr 14 | Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) |
| CVE-2026-27688 | NA Netweaver Application Server Abap Sap | 5.0 | Mar 10 | Missing Authorization check in SAP NetWeaver Application Server for ABAP |
| CVE-2026-24316 | NA Netweaver Application Server Abap Sap | 6.4 | Mar 10 | Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP |
| CVE-2026-24310 | NA Netweaver Application Server Abap Sap | 4.3 | Mar 10 | Missing Authorization check in SAP NetWeaver Application Server for ABAP |
| CVE-2026-24309 | NA Netweaver Application Server Abap Sap | 6.4 | Mar 10 | Missing Authorization check in SAP NetWeaver Application Server for ABAP |
| CVE-2026-24314 | SU S/4hana Uiapfi70 Sap | 4.3 | Feb 24 | Information Disclosure vulnerability in S/4HANA (Manage Payment Media) |
| CVE-2026-24328 | BS Business Server Pages Sap | 6.1 | Feb 10 | Open Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) |
| CVE-2026-24327 | SE Strategic Enterprise Management Sap | 4.3 | Feb 10 | Missing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application) |
| CVE-2026-24326 | SD S/4hana Defense & Security Sap | 4.3 | Feb 10 | Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations) |
| CVE-2026-24325 | BE Businessobjects Enterprise Sap | 4.8 | Feb 10 | Cross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console) |
| CVE-2026-24324 | BB Businessobjects Business Intelligence Platform Sap | 6.5 | Feb 10 | Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) |
| CVE-2026-24323 | S4 S4core Sap | 6.1 | Feb 10 | Multiple vulnerabilities in BSP Applications of SAP Document Management System |
| CVE-2026-24322 | ST Solution Tools Plug-in Sap | 7.7 | Feb 10 | Missing Authorization check in SAP Solution Tools Plug-In (ST-PI) |
| CVE-2026-24321 | CC Commerce Cloud Sap | 5.3 | Feb 10 | Information Disclosure vulnerability in SAP Commerce Cloud |
| CVE-2026-24320 | NA Netweaver AS Abap Kernel Sap | 3.1 | Feb 10 | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) |
| CVE-2026-24319 | BO Business One Sap | 5.8 | Feb 10 | Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files) |
| CVE-2026-24312 | SB Sap Basis Sap | 5.2 | Feb 10 | Missing authorization check in SAP Business Workflow |
| CVE-2026-23689 | SC Supply Chain Management Sap | 7.7 | Feb 10 | Denial of service (DOS) in SAP Supply Chain Management |
| CVE-2026-23688 | S4 S4core Sap | 4.3 | Feb 10 | Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) |
| CVE-2026-23687 | SB Sap Basis Sap | 8.8 | Feb 10 | XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform |
| CVE-2026-23686 | NA Netweaver Application Server Java Sap | 3.4 | Feb 10 | CRLF Injection vulnerability in SAP NetWeaver Application Server Java |
| CVE-2026-23685 | NE Netweaver Sap | 4.4 | Feb 10 | Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) |
| CVE-2026-23684 | CC Commerce Cloud Sap | 5.9 | Feb 10 | Race condition vulnerability in SAP Commerce Cloud |
| CVE-2026-23681 | ST Solution Tools Plug-in Sap | 4.3 | Feb 10 | Missing Authorization check in a function module in SAP Support Tools Plug-In |
| CVE-2026-0509 | NA Netweaver AS Abap Kernel Sap | 9.6 | Feb 10 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform |
| CVE-2026-0508 | BB Businessobjects Business Intelligence Platform Sap | 8.1 | Feb 10 | Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform |
| CVE-2026-0505 | ER Erp Sap | 6.1 | Feb 10 | Multiple vulnerabilities in BSP Applications of SAP Document Management System |
| CVE-2026-0490 | BB Businessobjects Business Intelligence Platform Sap | 7.5 | Feb 10 | Denial of service (DOS) in SAP BusinessObjects BI Platform |
| CVE-2026-0488 | S4 S/4hana Sap | 9.9 | Feb 10 | Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) |
| CVE-2026-0486 | ST Solution Tools Plug-in Sap | 4.3 | Feb 10 | Missing Authorization Check in ABAP based SAP systems |
| CVE-2026-0485 | BB Businessobjects Business Intelligence Platform Sap | 7.5 | Feb 10 | Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform |
| CVE-2026-0484 | SB Sap Basis Sap | 6.5 | Feb 10 | Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA |
| CVE-2026-0514 | BC Business Connector Sap | 6.1 | Jan 13 | Cross-Site Scripting (XSS) vulnerability in SAP Business Connector |
| CVE-2026-0513 | SR Supplier Relationship Management Sap | 4.7 | Jan 13 | Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog) |
| CVE-2026-0506 | NA Netweaver Application Server Abap Sap | 8.1 | Jan 13 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform |
| CVE-2026-0500 | IE Introscope Enterprise Manager Sap | 8.8 | Jan 13 | Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation) |
| CVE-2026-0498 | SH S/4 Hana Sap | 7.2 | Jan 13 | Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) |
| CVE-2026-0492 | HD Hana Database Sap | 8.8 | Jan 13 | Privilege escalation vulnerability in SAP HANA database |
| CVE-2025-42894 | BC Business Connector Sap | 6.8 | Nov 11 | Path Traversal vulnerability in SAP Business Connector |
| CVE-2025-42893 | BC Business Connector Sap | 6.1 | Nov 11 | Open Redirect vulnerability in SAP Business Connector |
