CVE-2026-76977Clickjacking vulnerability in SAPUI5(Frame Options Allowlist) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAPUI5(Frame Options Allowlist) | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76971Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Manufacturing Integration and Intelligence | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76969Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Cloud Application Programming Model (CAP) | Published09/08/2026 | SeverityCritical |
|---|
CVE-2026-76968Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Web Dispatcher, Internet Communication Manager and SAP Content Server | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76967Insecure Deserialization in SAP NetWeaver Business Client | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Business Client | Published09/08/2026 | SeverityHigh |
|---|
CVE-2026-76963Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver and ABAP platform | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76962Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (Manage Bank Chains app) | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76961Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (Finance for Advanced Payment Management) | Published09/08/2026 | SeverityLow |
|---|
CVE-2026-76960Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP S/4HANA (Finance for Advanced Payment Management) | Published09/08/2026 | SeverityLow |
|---|
CVE-2026-76959Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP S/4HANA (Finance for Advanced Payment Management) | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-76958XML External Entity (XXE) Vulnerability in SAP Integration Suite | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Integration Suite | Published09/08/2026 | SeverityHigh |
|---|
CVE-2026-66768Improper Access Control in SAP NetWeaver (SAP GUI for Java) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver (SAP GUI for Java) | Published09/08/2026 | SeverityCritical |
|---|
CVE-2026-66767Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Application server for ABAP and ABAP Platform | Published09/08/2026 | SeverityHigh |
|---|
CVE-2026-58240Missing Authentication check in SAP NetWeaver (Message Server) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver (Message Server) | Published09/08/2026 | SeverityCritical |
|---|
CVE-2026-58234Denial of Service vulnerability in SAP Process Integration (SOAP Adapter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Process Integration (SOAP Adapter) | Published09/08/2026 | SeverityLow |
|---|
CVE-2026-44766SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (Intercompany Matching and Reconciliation) | Published09/08/2026 | SeverityMedium |
|---|
CVE-2026-44756Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing | Exploitation statusNot known exploited | FixNot confirmed | Affected productS%20Processing.svg) SAP Extended Passport (EPP) Processing | Published09/08/2026 | SeverityCritical |
|---|
CVE-2026-66766Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (Manage Supply Protection) | Published08/25/2026 | SeverityHigh |
|---|
CVE-2026-58231Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Commerce Cloud (Data Hub Adapter) | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-66779Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Application Server ABAP | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66776Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66775Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66774Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-66773Server-controlled `__next` URL is not checking cross-origin | Exploitation statusNot known exploited | FixNot confirmed | Affected productO Odata | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66772Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP BusinessObjects Business Intelligence Platform (Admin Tools) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66771Cross Site Scripting (XSS) vulnerability in SAPUI5 | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAPUI5 | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66770SQL Injection vulnerability in SAP Social Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Social Intelligence | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66764Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4 HANA (Reprocess Bank Statement Items) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP BusinessObjects Business Intelligence Platform (Central Management Server) | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP BusinessObjects Business Intelligence | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58247Memory Corruption vulnerability in SAP ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP ABAP Platform | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Advanced Planning and Optimization (Model Mix Planning) | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-58244Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58243Privilege Escalation vulnerability in SAP ABAP Developer Tools | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP ABAP Developer Tools | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-58241Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58236OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Application Server ABAP and ABAP Platform | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58235Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver AS Java (Adobe Document Services) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44765Missing Authorization Check in SAP Manufacturing Integration and Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44764Missing Authorization Check in SAP Manufacturing Integration and Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44763Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44762Security Misconfiguration in SAP Data Services Management Console | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Data Services Management Console | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-44758Code Injection vulnerability in Manufacturing Integration and Intelligence | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-40130Memory Corruption vulnerability in SAPSPrint Service | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAPSPrint Service | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-34265Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver and ABAP platform | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-58246Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Application Server for ABAP | Published07/28/2026 | SeverityMedium |
|---|
CVE-2026-44767Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection | Exploitation statusNot known exploited | FixNot confirmed | Affected product@ @ui5/webcomponents-base | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-58233Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Change and Transport System Attach Tool (ctsattach) | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44771Missing Authorization check in SAP S/4HANA (Draft operation) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (Draft operation) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44770Missing Authorization check in SAP S/4 HANA (Create Single Payment) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4 HANA (Create Single Payment) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44769SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA Project Management (PPM-PRO) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44768Security misconfiguration in SAP CRM (WebClient UI) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP CRM (WebClient UI) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44761Insecure Sample Credentials in SAP Commerce Cloud | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Commerce Cloud | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-44760Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44759Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver Enterprise Portal | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44753Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP HANA Extended Application Services classic model (User Self Service) | Published07/14/2026 | SeverityLow |
|---|
CVE-2026-44752Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver Application Server Java(Configuration Wizard) | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44747Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver Application Server ABAP | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-44745Open Redirect vulnerability in SAP Approuter | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Approuter | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-27690HTTP Request Smuggling in SAP Approuter | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP Approuter | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-0487DLL Hijacking vulnerability in SAProuter on Microsoft Windows | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAProuter on Microsoft Windows | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44757Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Wily Introscope Enterprise Manager | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44755Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Business Objects Business Intelligence Platform | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44754Missing caller identification check-in for ODP Data Replication APIs | Exploitation statusNot known exploited | FixNot confirmed | Affected productO ODP Data Replication APIs | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44751Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityHigh |
|---|
CVE-2026-44750Missing Authorization check in SAP MDG (Review Match Groups Application) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP MDG (Review Match Groups Application) | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44748XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityCritical |
|---|
CVE-2026-44746Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver AS Java (JDBC Test Servlet) | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44744SQL Injection vulnerability in SAP S/4HANA | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP S/4HANA | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44743Security Misconfiguration vulnerability in SAP Business Objects | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Business Objects | Published06/09/2026 | SeverityLow |
|---|
CVE-2026-40128Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP NetWeaver Application Server Java (Web Container) | Published06/09/2026 | SeverityCritical |
|---|
CVE-2026-27671Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityCritical |
|---|
CVE-2026-24315Path Traversal Vulnerability in SAP Fiori (launchpad) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Fiori (Launchpad) | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44749Information Disclosure vulnerability in SAP Gateway | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Gateway | Published05/26/2026 | SeverityMedium |
|---|
CVE-2026-27680CSS Injection vulnerability in SAP NetWeaver Application Server ABAP | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver Application Server ABAP | Published05/14/2026 | SeverityLow |
|---|
CVE-2026-40137Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) | Exploitation statusNot known exploited | FixNot confirmed | Affected productB.svg) Business Server Pages Application (TAF_APPLAUNCHER) | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40136Denial of service (DoS) in SAP Financial Consolidation | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Financial Consolidation | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40135OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver Application server for ABAP and ABAP Platform | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40134Missing Authorization Check in SAP Incentive and Commission Management | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Incentive and Commission Management | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40133Missing Authorization check in SAP S/4HANA Condition Maintenance | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP S/4HANA Condition Maintenance | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40132Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-40131SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library | Exploitation statusNot known exploited | FixNot confirmed | Affected productS%20deploy%20library.svg) SAP HANA Deployment Infrastructure (HDI) deploy library | Published05/12/2026 | SeverityLow |
|---|
CVE-2026-40129Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Application Server ABAP for SAP NetWeaver and ABAP Platform | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-34263Missing authentication check in SAP Commerce cloud configuration | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Commerce cloud configuration | Published05/12/2026 | SeverityCritical |
|---|
CVE-2026-34260SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAP S/4HANA (SAP Enterprise Search for ABAP) | Published05/12/2026 | SeverityCritical |
|---|
CVE-2026-34259OS Command Injection Vulnerability in SAP Forecasting & Replenishment | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Forecasting & Replenishment | Published05/12/2026 | SeverityHigh |
|---|
CVE-2026-34258Content Spoofing vulnerability in SAPUI5 (Search UI) | Exploitation statusNot known exploited | FixNot confirmed | Affected productS.svg) SAPUI5 (Search UI) | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-27682Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-0502Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP BusinessObjects Business Intelligence Platform | Published05/12/2026 | SeverityMedium |
|---|
CVE-2026-34264Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Human Capital Management for SAP S/4HANA | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-34262Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP HANA Cockpit and HANA Database Explorer | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-34261Missing Authorization check in SAP Business Analytics and SAP Content Management | Exploitation statusNot known exploited | FixNot confirmed | Affected productS SAP Business Analytics and SAP Content Management | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-34257Open Redirect vulnerability in SAP NetWeaver Application Server ABAP | Exploitation statusNot known exploited | FixNot confirmed | Affected productSSAP NetWeaver Application Server ABAP | Published04/14/2026 | SeverityMedium |
|---|
