SAP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
25 matching records
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.65%Aug 12, 2025
- UnknownSAP NetWeaver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 41.45%Jun 8, 2025
- UnknownSAP internet_graphics_server Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 41.05%Jun 7, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- UnknownSAP knowledge_warehouse Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 23.40%Apr 18, 2024
- UnknownSAP businessobjects_business_intelligence_platform Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 61.74%Feb 14, 2024
- UnknownSAP NetWeaver Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 69.08%Jan 22, 2024
- UnknownSAP scimono Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 10.12%Nov 30, 2023
- Critical10.0SAP Multiple Products HTTP Request Smuggling VulnerabilityPatch nowKEVEPSS 97.95%Feb 9, 2022
- High8.8SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 36.90%Sep 14, 2021
- Medium6.1SAP Solution Manager URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 2.20%Dec 9, 2020
- Medium5.3SAP netweaver_application_server_java Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.68%Jul 14, 2020
- Critical10.0SAP NetWeaver Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 94.72%Jul 14, 2020
- Critical9.8SAP Solution Manager Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.13%Mar 10, 2020
- Critical9.8SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 7.47%Aug 14, 2019
- Medium6.6SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityPatch nowKEVEPSS 28.93%Mar 1, 2018
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 95.11%Aug 7, 2017
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- High7.5SAP NetWeaver Directory Traversal VulnerabilityPatch nowKEVEPSS 47.25%Apr 7, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityPatch nowKEVEPSS 71.52%Feb 16, 2016
Sort
25 records