sap security advisories
60 threat alerts tracking vulnerabilities and security advisories that affect sap products.
Vulnios monitors sap CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent sap security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-41730 — sap — business_objects_business_intelligence_platform
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can f
criticalCVE-2024-41730Critical Vulnerability: CVE-2026-27690 — sap — approuter
Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could re
criticalCVE-2026-27690Critical Vulnerability: CVE-2022-35293 — sap — enable_now_manager
Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing lim
criticalCVE-2022-35293Critical Vulnerability: CVE-2021-42064 — sap — commerce
If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker t
criticalCVE-2021-42064Critical Vulnerability: CVE-2021-44231 — sap — abap_platform, netweaver_application_server_abap
Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
criticalCVE-2021-44231Critical Vulnerability: CVE-2021-40499 — sap — netweaver_application_server_abap
Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be execu
criticalCVE-2021-40499Critical Vulnerability: CVE-2021-33690 — sap — netweaver_development_infrastructure
Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeave
criticalCVE-2021-33690Critical Vulnerability: CVE-2021-33695 — sap — cloud_connector
Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
criticalCVE-2021-33695Critical Vulnerability: CVE-2021-33701 — sap — dmis, s4core
DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, al
criticalCVE-2021-33701Critical Vulnerability: CVE-2021-37535 — sap — netweaver_application_server_java
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
criticalCVE-2021-37535Critical Vulnerability: CVE-2021-33672 — sap — contact_center
Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipien
criticalCVE-2021-33672Critical Vulnerability: CVE-2014-9320 — sap — businessobjects_edge
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2
criticalCVE-2014-9320Critical Vulnerability: CVE-2021-27610 — sap — netweaver_abap, netweaver_application_server_abap
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and d
criticalCVE-2021-27610Critical Vulnerability: CVE-2021-27602 — sap — commerce
SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modul
criticalCVE-2021-27602Critical Vulnerability: CVE-2021-21484 — sap — hana
LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.
criticalCVE-2021-21484Critical Vulnerability: CVE-2021-21479 — sap — scimono
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
criticalCVE-2021-21479Critical Vulnerability: CVE-2021-21477 — sap — commerce
SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be able to inject malic
criticalCVE-2021-21477Critical Vulnerability: CVE-2021-21465 — sap — business_warehouse
The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the databa
criticalCVE-2021-21465Critical Vulnerability: CVE-2020-26829 — sap — netweaver_application_server_java
SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside
criticalCVE-2020-26829Critical Vulnerability: CVE-2020-26838 — sap — business_warehouse, bw\/4hana
SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to
criticalCVE-2020-26838Critical Vulnerability: CVE-2020-26837 — sap — solution_manager
SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise
criticalCVE-2020-26837Critical Vulnerability: CVE-2020-26831 — sap — businessobjects_business_intelligence_platform
SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An atta
criticalCVE-2020-26831Critical Vulnerability: CVE-2020-26824 — sap — solution_manager
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an
criticalCVE-2020-26824Critical Vulnerability: CVE-2020-26823 — sap — solution_manager
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Servi
criticalCVE-2020-26823Critical Vulnerability: CVE-2020-26822 — sap — solution_manager
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, t
criticalCVE-2020-26822Critical Vulnerability: CVE-2020-26821 — sap — solution_manager
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact
criticalCVE-2020-26821Critical Vulnerability: CVE-2020-6364 — sap — introscope_enterprise_manager
SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potential
criticalCVE-2020-6364Critical Vulnerability: CVE-2020-6284 — sap — netweaver_knowledge_management
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script content in a stored file due to inadequate filtering with the accessing user's privile
criticalCVE-2020-6284Critical Vulnerability: CVE-2020-6294 — sap, opengroup — businessobjects_business_intelligence_platform, unix
Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity.
criticalCVE-2020-6294Critical Vulnerability: CVE-2020-6263 — sap — netweaver_application_server_java
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.
criticalCVE-2020-6263Critical Vulnerability: CVE-2020-6265 — sap — commerce, commerce_data_hub
SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been config
criticalCVE-2020-6265Critical Vulnerability: CVE-2020-6275 — sap — netweaver_application_server_abap
SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path n
criticalCVE-2020-6275Critical Vulnerability: CVE-2020-6242 — sap — businessobjects_business_intelligence_platform
SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the
criticalCVE-2020-6242Critical Vulnerability: CVE-2020-6238 — sap — commerce_cloud
SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and av
criticalCVE-2020-6238Critical Vulnerability: CVE-2020-6195 — sap — businessobjects_business_intelligence_platform
SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gai
criticalCVE-2020-6195Critical Vulnerability: CVE-2020-6198 — sap — solution_manager
SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing
criticalCVE-2020-6198Critical Vulnerability: CVE-2020-6203 — sap — netweaver
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus cha
criticalCVE-2020-6203Critical Vulnerability: CVE-2019-0403 — sap — enable_now
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.
criticalCVE-2019-0403Critical Vulnerability: CVE-2019-0345 — sap — netweaver_application_server_java
A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted
criticalCVE-2019-0345Critical Vulnerability: CVE-2019-0330 — sap — diagnostics_agent
The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application
criticalCVE-2019-0330Critical Vulnerability: CVE-2019-0304 — sap — advanced_business_application_programming_platform_kernel, advanced_business_application_programming_platform_krnl32nuc
FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.
criticalCVE-2019-0304Critical Vulnerability: CVE-2019-0285 — sap — crystal_reports
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.
criticalCVE-2019-0285Critical Vulnerability: CVE-2019-0259 — sap — businessobjects
SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.
criticalCVE-2019-0259Critical Vulnerability: CVE-2019-0261 — sap — landscape_management
Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in
criticalCVE-2019-0261Critical Vulnerability: CVE-2019-0247 — sap — cloud_connector
SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
criticalCVE-2019-0247Critical Vulnerability: CVE-2019-0246 — sap — cloud_connector
SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.
criticalCVE-2019-0246Critical Vulnerability: CVE-2018-2445 — sap — businessobjects_business_intelligence
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting
criticalCVE-2018-2445Critical Vulnerability: CVE-2018-2437 — sap — internet_graphics_server
The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious fil
criticalCVE-2018-2437Critical Vulnerability: CVE-2018-2424 — sap — hana_database, ui
SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software c
criticalCVE-2018-2424Critical Vulnerability: CVE-2018-2368 — sap — netweaver_system_landscape_directory
SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.
criticalCVE-2018-2368Critical Vulnerability: CVE-2017-16684 — sap — business_intelligence_promotion_management_application
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.
criticalCVE-2017-16684Critical Vulnerability: CVE-2017-15295 — sap — point_of_sale_xpress_server
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
criticalCVE-2017-15295Critical Vulnerability: CVE-2017-15293 — sap — point_of_sale_xpress_server
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 252
criticalCVE-2017-15293Critical Vulnerability: CVE-2015-7241 — sap — netweaver
XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
criticalCVE-2015-7241Critical Vulnerability: CVE-2017-11459 — sap — trex
SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note
criticalCVE-2017-11459Critical Vulnerability: CVE-2016-6256 — sap — business_one
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i.
criticalCVE-2016-6256Critical Vulnerability: CVE-2016-6143 — sap — hana
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.
criticalCVE-2016-6143Critical Vulnerability: CVE-2016-6818 — sap — business_intelligence_platform
SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), o
criticalCVE-2016-6818Critical Vulnerability: CVE-2017-7691 — sap — trex
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592.
criticalCVE-2017-7691Critical Vulnerability: CVE-2016-10311 — sap — netweaver
Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.
criticalCVE-2016-10311
Showing the 60 most recent. Older alerts are archived but still reachable via search and the main feed.
Track sap exposure across your environment
Vulnios automatically cross-references your asset inventory against new sap CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan