SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0505Multiple vulnerabilities in BSP Applications of SAP Document Management System
- CVE-2026-0490Denial of service (DOS) in SAP BusinessObjects BI Platform
- CVE-2026-0488Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
- CVE-2026-0486Missing Authorization Check in ABAP based SAP systems
- CVE-2026-0485Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform
- CVE-2026-0484Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA
- CVE-2026-23683Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0514Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- CVE-2026-0513Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)
- CVE-2026-0511Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0510Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
- CVE-2026-0507OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK
- CVE-2026-0506Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2026-0504Insufficient Input Handling in JNDI Operations of SAP Identity Management
- CVE-2026-0503Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)
- CVE-2026-0501SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)
- CVE-2026-0500Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)
- CVE-2026-0499Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- CVE-2026-0498Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)
- CVE-2026-0497Missing Authorization check in Business Server Pages Application (Product Designer Web UI)
- CVE-2026-0496Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0495Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0494Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0493Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0492Privilege escalation vulnerability in SAP HANA database
- CVE-2026-0491Code Injection vulnerability in SAP Landscape Transformation
- CVE-2025-42928Deserialization Vulnerability in SAP jConnect - SDK for ASE
- CVE-2025-42904Information Disclosure vulnerability in Application Server ABAP
- CVE-2025-42896Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform
- CVE-2025-42891Missing Authorization check in SAP Enterprise Search for ABAP