Vendor
SAP
1,623 known vulnerabilities.
SAP at a glance
3 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 42 | 9 |
| Oct 2026 | 20 | 4 |
| Sep 2026 | 18 | 4 |
| Aug 2026 | 35 | 3 |
| Jul 2026 | 16 | 3 |
| Jun 2026 | 12 | 3 |
| May 2026 | 16 | 2 |
| Apr 2026 | 17 | 1 |
| Mar 2026 | 13 | 1 |
| Feb 2026 | 27 | 2 |
| Jan 2026 | 20 | 4 |
| Dec 2025 | 12 | 2 |
| Nov 2025 | 18 | 2 |
| Oct 2025 | 9 | 2 |
| Sep 2025 | 21 | 3 |
| Aug 2025 | 16 | 2 |
| Jul 2025 | 29 | 5 |
| Jun 2025 | 16 | 1 |
| May 2025 | 20 | 2 |
| Apr 2025 | 20 | 4 |
| Mar 2025 | 20 | 0 |
| Feb 2025 | 17 | 0 |
| Jan 2025 | 14 | 2 |
| Dec 2024 | 11 | 1 |
Most common weaknesses
Products
Latest advisories
-
High max 10.0NCSC-2026-0485 45 CVEs
Kwetsbaarheden verholpen in SAP-producten
SAP heeft meerdere kwetsbaarheden verholpen in diverse SAP-producten, waaronder SAP NetWeaver Application Server ABAP, SAP NetWeaver AS Java, SAP Web Dispatcher, SAP BusinessObjects Business Intelligence Platform, SAP Cloud SDK, SAP Host Agent, SAP NetWeaver …
-
High max 10.0WID-SEC-2026-4420 45 CVEs
SAP Patch Day November 2026: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu …
-
High max 10.0WID-SEC-2026-3888 22 CVEs
SAP Patch Day Oktober 2026: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder zu manipulieren, SQL-Injection- und Cross-Site-Scr…
-
High max 10.0NCSC-2026-0356 11 CVEs
Kwetsbaarheden verholpen in diverse SAP-producten
SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeav…
-
High max 10.0WID-SEC-2026-3220 20 CVEs
SAP Patch Day September 2026: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen oder zu manipulieren, SQL-Injection-Angriffe durchzuführ…
1,623 results · Feed
-
High 7.5
The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.…
-
High 7.5
SAP Cloud SDK for AI (Node.js) could inadvertently include sensitive authentication credentials in error messages gener…
-
High 7.5
Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))
The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and …
-
High 7.1
Cross-tenant sandbox takeover in SAP/astonish
In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware ses…
-
Medium 6.4
Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP)
Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges and access to a network segment between application servers on an SAP syste…
-
Medium 6.0
Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager
Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users a…
-
Critical 10.0
Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)
SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass authentication and impersonate arbit…
-
Medium 6.1
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual Composer
SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker could craft a malicious link containing specially crafted input. If a victim clicks the link, the injected scri…
-
High 7.5
Insufficient Input Validation in SAP Host Agent
SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successf…
-
High 7.6
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link…
-
High 7.5
Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)
SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality…
-
High 7.2
Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview)
SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within certain affected functionality. An attacker with high privileges could submit specially crafted input to inject and execute arbitrary code on t…
-
High 8.2
Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exp…
-
Medium 6.5
Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server whic…
-
Medium 6.1
CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)
SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources in the application. An unauthenticated attacker could craft a malicious link that, when clicked by an authentic…
-
Medium 6.5
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successfu…
-
Low 3.1
Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI)
Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an authenticated attacker to invoke this functionality to access data that would otherwise be restricted. Exploitation is only possible under certa…
-
High 7.5
Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting i…
-
High 7.5
Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads t…
-
High 7.5
Information Disclosure in SAP NetWeaver (SAP Message Server)
SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated attacker to send specially crafted input. Successful exploitation could allow the attacker to retrieve sensitive information, resulting in a…
-
Critical 9.9
Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)
SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause a…
-
Medium 6.5
Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP
SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system u…
-
Medium 6.5
Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves sensitive information. An attacker with low privileges could send a specially crafted request to access sensitive i…
-
High 7.7
Memory Corruption vulnerability in SAP Web Dispatcher
SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing th…
-
Critical 9.1
XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, en…
-
Medium 4.3
Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform
SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This r…
-
Critical 9.9
Missing authorization check in S4CRM
SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An attacker with low privileges could send specially crafted input through a remote interface to inject and execute ar…
-
High 7.5
Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing…
-
High 7.5
Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher
SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to beco…
-
Medium 4.3
Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise Portal
SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action o…
-
Medium 5.8
Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitat…
-
Medium 5.3
Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool)
Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affe…
-
Critical 10.0
Memory Corruption vulnerability in SAP Web Dispatcher
SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Succes…
-
Critical 9.6
Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenti…
-
Medium 4.4
Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management Console
SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This…
-
High 7.5
SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests. An una…
-
Critical 10.0
Broken Access Control in SAP Gateway
SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness …
-
High 7.5
Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthentica…
-
High 7.5
Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthentic…
-
High 8.9
Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory c…