SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-66771Cross Site Scripting (XSS) vulnerability in SAPUI5
- CVE-2026-66770SQL Injection vulnerability in SAP Social Intelligence
- CVE-2026-66764Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)
- CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)
- CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business Intelligence
- CVE-2026-58247Memory Corruption vulnerability in SAP ABAP Platform
- CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)
- CVE-2026-58244Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)
- CVE-2026-58243Privilege Escalation vulnerability in SAP ABAP Developer Tools
- CVE-2026-58241Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard)
- CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-58236OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
- CVE-2026-58235Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)
- CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- CVE-2026-44765Missing Authorization Check in SAP Manufacturing Integration and Intelligence
- CVE-2026-44764Missing Authorization Check in SAP Manufacturing Integration and Intelligence
- CVE-2026-44763Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence
- CVE-2026-44762Security Misconfiguration in SAP Data Services Management Console
- CVE-2026-44758Code Injection vulnerability in Manufacturing Integration and Intelligence
- CVE-2026-40130Memory Corruption vulnerability in SAPSPrint Service
- CVE-2026-34265Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
- CVE-2026-58246Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2026-44767Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection
- CVE-2026-58233Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)
- CVE-2026-44771Missing Authorization check in SAP S/4HANA (Draft operation)
- CVE-2026-44770Missing Authorization check in SAP S/4 HANA (Create Single Payment)