SAP vulnerabilities
1,623 CVEs and advisories name SAP as an affected vendor, 8 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-42880Code Injection vulnerability in SAP Solution Manager
- CVE-2025-42878Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)
- CVE-2025-42877Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
- CVE-2025-42876Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)
- CVE-2025-42875Missing Authentication check in SAP NetWeaver Internet Communication Framework
- CVE-2025-42874Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)
- CVE-2025-42873Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)
- CVE-2025-42872Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- CVE-2025-42940Memory Corruption vulnerability in SAP CommonCryptoLib
- CVE-2025-42924Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)
- CVE-2025-42919Information Disclosure vulnerability in SAP NetWeaver Application Server Java
- CVE-2025-42899Missing Authorization check in SAP S4CORE (Manage Journal Entries)
- CVE-2025-42897Information Disclosure vulnerability in SAP Business One (SLD)
- CVE-2025-42895Code Injection vulnerability in SAP HANA JDBC Client
- CVE-2025-42894Path Traversal vulnerability in SAP Business Connector
- CVE-2025-42893Open Redirect vulnerability in SAP Business Connector
- CVE-2025-42892OS Command Injection vulnerability in SAP Business Connector
- CVE-2025-42890Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)
- CVE-2025-42889SQL Injection vulnerability in SAP Starter Solution (PL SAFT)
- CVE-2025-42888Information Disclosure vulnerability in SAP GUI for Windows
- CVE-2025-42887Code Injection vulnerability in SAP Solution Manager
- CVE-2025-42886Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- CVE-2025-42885Missing authentication in SAP HANA 2.0 (hdbrss)
- CVE-2025-42884JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal
- CVE-2025-42883Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)
- CVE-2025-42882Missing Authorization check in SAP NetWeaver Application Server for ABAP
- CVE-2025-42939Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements)
- CVE-2025-42937Directory Traversal vulnerability in SAP Print Service
- CVE-2025-42910Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management
- CVE-2025-42909Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances