SAP_SE has 40 CVEs on record between 2024 and 2026. Disclosure cadence is accelerating: 38 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 20. The median CVSS is 6.5 (medium), with 8 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-862 (11) and CWE-79 (5). Most affected products: SAP NetWeaver Enterprise Portal (3), SAP S/4HANA (Finance for Advanced Payment Management) (3), SAP HCM (My Timesheet Fiori 2.0 application) (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 38 prev 0
Weakness classes
Products
- SAP NetWeaver Enterprise Portal 3
- SAP S/4HANA (Finance for Advanced Payment Management) 3
- SAP HCM (My Timesheet Fiori 2.0 application) 2
- SAP Manufacturing Integration and Intelligence 2
- SAP NetWeaver Application Server for ABAP 2
- SAPCAR 2
Worst active — by depth score
CVE-2026-89111Critical· 10.0The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications55CVE-2026-89110Critical· 9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality55CVE-2026-89107Critical· 9.9SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language55CVE-2026-44756Critical· 10.0A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library55CVE-2026-58240Critical· 9.8SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration54
SAP_SE vulnerabilities
CVEs affecting SAP_SE, newest first. Open any entry for full detail, references, and exploit status.
49 CVEsRSS
CVE-2026-76959Medium· 4.6SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated…
CVE-2026-76958High· 8.5SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external …
CVE-2026-66768Critical· 9.0SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger…
CVE-2026-66767High· 7.7SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session …
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session …
CVE-2026-58240Critical· 9.8SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakne…
CVE-2026-58234Low· 2.2SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system r…
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system r…
CVE-2026-44766Medium· 6.5SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the us…
CVE-2026-44756Critical· 10.0A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentiall…
CVE-2026-24317Medium· 5.0SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application
SAP GUI for Windows allows DLL files to be loaded from arbitrary directories within the application. An unauthenticated attacker could exploit this vulnerability by persuading a victim to place a malicious DLL within one of these directo…
CVE-2025-42937Critical· 9.8SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users
SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality i…
CVE-2025-42917Medium· 6.5Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)
SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while …
CVE-2025-42914Low· 3.1Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a l…
CVE-2025-42912Medium· 6.5Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confid…
CVE-2025-42938Medium· 6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible
Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user clicks on this link, the injected…
CVE-2025-43001Medium· 6.9Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an att…
CVE-2025-42992Medium· 6.9Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in …
CVE-2025-42953High· 8.1Missing Authorization check in SAP NetWeaver Application Server for ABAP
SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confid…
CVE-2025-42989Critical· 9.6Missing Authorization check in SAP NetWeaver Application Server for ABAP
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of t…
CVE-2024-41730Critical· 9.8Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting …