en
SAP SE is a Germany-based European technology company that develops and delivers enterprise application software, cloud services, and business AI. Its products help organizations manage core processes such as finance, procurement, HR, supply chain, manufacturing, and customer experience. SAP serves organizations globally through software, services, and a broad partner ecosystem.
As of 11/08/2026, SAP_SE recorded 73 security vulnerabilities in the last 90 days across 50 products, including 24 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, SAP Business AI Platform (Approuter) had the most security vulnerabilities in the SAP_SE ecosystem, with 11 vulnerabilities—approximately 15.07% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter)CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter)CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business IntelligenceCVE-2026-58247Memory Corruption vulnerability in SAP ABAP Platform| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) | Exploitation statusNot exploited | FixNo |
| Affected productSAP BusinessObjects Business Intelligence Platform (Central Management Server) |
| Published08/11/2026 |
| SeverityHigh |
CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business Intelligence | Exploitation statusNot exploited | FixNo | Affected productSAP BusinessObjects Business Intelligence | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58247Memory Corruption vulnerability in SAP ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP ABAP Platform | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning) | Exploitation statusNot exploited | FixNo | Affected productSAP Advanced Planning and Optimization (Model Mix Planning) | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-58244Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) | Exploitation statusNot exploited | FixNo | Affected productSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58243Privilege Escalation vulnerability in SAP ABAP Developer Tools | Exploitation statusNot exploited | FixNo | Affected productSAP ABAP Developer Tools | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-58241Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58236OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server ABAP and ABAP Platform | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58235Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver AS Java (Adobe Document Services) | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-58231Unauthenticated code execution flaw in SAP Commerce Cloud (Data Hub Adapter) | Exploitation statusNot exploited | FixNo | Affected productSAP Commerce Cloud (Data Hub Adapter) | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter) | Exploitation statusNot exploited | FixNo | Affected productSAP Business AI Platform (Approuter) | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44765Missing Authorization Check in SAP Manufacturing Integration and Intelligence | Exploitation statusNot exploited | FixNo | Affected productSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44764Missing Authorization Check in SAP Manufacturing Integration and Intelligence | Exploitation statusNot exploited | FixNo | Affected productSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44763Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence | Exploitation statusNot exploited | FixNo | Affected productSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityHigh |
|---|
CVE-2026-44762Security Misconfiguration in SAP Data Services Management Console | Exploitation statusNot exploited | FixNo | Affected productSAP Data Services Management Console | Published08/11/2026 | SeverityLow |
|---|
CVE-2026-44758Code Injection vulnerability in Manufacturing Integration and Intelligence | Exploitation statusNot exploited | FixNo | Affected productSAP Manufacturing Integration and Intelligence | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-40130Memory Corruption vulnerability in SAPSPrint Service | Exploitation statusNot exploited | FixNo | Affected productSAPSPrint Service | Published08/11/2026 | SeverityMedium |
|---|
CVE-2026-34265Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver and ABAP Platform | Published08/11/2026 | SeverityCritical |
|---|
CVE-2026-58246Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server for ABAP | Published07/28/2026 | SeverityMedium |
|---|
CVE-2026-58233Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach) | Exploitation statusNot exploited | FixNo | Affected productSAP Change and Transport System Attach Tool (ctsattach) | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44771Missing Authorization check in SAP S/4HANA (Draft operation) | Exploitation statusNot exploited | FixNo | Affected productSAP S/4HANA (Draft operation) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44770Missing Authorization check in SAP S/4 HANA (Create Single Payment) | Exploitation statusNot exploited | FixNo | Affected productSAP S/4 HANA (Create Single Payment) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44769SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO) | Exploitation statusNot exploited | FixNo | Affected productSAP S/4HANA Project Management (PPM-PRO) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44768Security misconfiguration in SAP CRM (WebClient UI) | Exploitation statusNot exploited | FixNo | Affected productSAP CRM WebClient UI | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44767Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection | Exploitation statusNot exploited | FixNo | Affected product@ui5/webcomponents-base | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44761Insecure Sample Credentials in SAP Commerce Cloud | Exploitation statusNot exploited | FixNo | Affected productSAP Commerce Cloud | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-44760Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44759Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Enterprise Portal | Published07/14/2026 | SeverityMedium |
|---|
CVE-2026-44753Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service) | Exploitation statusNot exploited | FixNo | Affected productSAP HANA Extended Application Services classic model (User Self Service) | Published07/14/2026 | SeverityLow |
|---|
CVE-2026-44752Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server Java(Configuration Wizard) | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44747Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server ABAP | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-44745Open Redirect vulnerability in SAP Approuter | Exploitation statusNot exploited | FixNo | Affected productSAP Approuter | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-27690HTTP Request Smuggling in SAP Approuter | Exploitation statusNot exploited | FixNo | Affected productSAP Approuter | Published07/14/2026 | SeverityCritical |
|---|
CVE-2026-0487DLL Hijacking vulnerability in SAProuter on Microsoft Windows | Exploitation statusNot exploited | FixNo | Affected productSAProuter on Microsoft Windows | Published07/14/2026 | SeverityHigh |
|---|
CVE-2026-44757Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager | Exploitation statusNot exploited | FixNo | Affected productSAP Wily Introscope Enterprise Manager | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44755Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform | Exploitation statusNot exploited | FixNo | Affected productSAP Business Objects Business Intelligence Platform | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44754Missing caller identification check-in for ODP Data Replication APIs | Exploitation statusNot exploited | FixNo | Affected productODP Data Replication APIs | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44751Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityHigh |
|---|
CVE-2026-44750Missing Authorization check in SAP MDG (Review Match Groups Application) | Exploitation statusNot exploited | FixNo | Affected productSAP MDG (Review Match Groups Application) | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44748XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityCritical |
|---|
CVE-2026-44746Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver AS Java (JDBC Test Servlet) | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44744SQL Injection vulnerability in SAP S/4HANA | Exploitation statusNot exploited | FixNo | Affected productSAP S/4HANA | Published06/09/2026 | SeverityMedium |
|---|
CVE-2026-44743Security Misconfiguration vulnerability in SAP Business Objects | Exploitation statusNot exploited | FixNo | Affected productSAP Business Objects | Published06/09/2026 | SeverityLow |
|---|
CVE-2026-40128Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver Application Server Java (Web Container) | Published06/09/2026 | SeverityCritical |
|---|
CVE-2026-27671Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | Exploitation statusNot exploited | FixNo | Affected productSAP NetWeaver AS ABAP and ABAP Platform | Published06/09/2026 | SeverityCritical |
|---|
463 Results | Page 2 of 10