SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-58249Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
- CVE-2026-58242Improper Authorization check in SAP Cloud Connector
- CVE-2026-76974Information Disclosure vulnerability in SAP Fiori Launchpad
- CVE-2026-76977Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)
- CVE-2026-76971Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
- CVE-2026-76969Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
- CVE-2026-76968Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
- CVE-2026-76967Insecure Deserialization in SAP NetWeaver Business Client
- CVE-2026-76963Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
- CVE-2026-76962Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)
- CVE-2026-76961Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
- CVE-2026-76960Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
- CVE-2026-76959Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
- CVE-2026-76958XML External Entity (XXE) Vulnerability in SAP Integration Suite
- CVE-2026-66768Improper Access Control in SAP NetWeaver (SAP GUI for Java)
- CVE-2026-66767Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2026-58240Missing Authentication check in SAP NetWeaver (Message Server)
- CVE-2026-58234Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
- CVE-2026-44766SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)
- CVE-2026-44756Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
- CVE-2026-66766Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)
- CVE-2026-58231Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
- CVE-2026-66779Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP
- CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66776Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66775Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66774Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66773Server-controlled `__next` URL is not checking cross-origin
- CVE-2026-66772Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)