-Infinity
0

Vendor Risk Score

See how sap compares to other vendors in security performance

View Risk Score →

Software

BleepingComputerSAP warns of critical flaws in NetWeaver and Commerce Cloud

First published (updated )

SAP SAP Change and Transport System Attach Tool (ctsattach)Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)

Risk 62
Severity
7.6
First published (updated )

SAP SAP S/4HANAMissing Authorization check in SAP S/4HANA (Draft operation)

Risk 22
Severity
4.3
First published (updated )

SAP SAP S/4HANAMissing Authorization check in SAP S/4 HANA (Create Single Payment)

Risk 22
Severity
4.3
First published (updated )

SAP SAP S/4HANA Project Management (PPM-PRO)SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)

Risk 44
Severity
5.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP CRM WebClient UISecurity misconfiguration in SAP CRM (WebClient UI)

Risk 21
Severity
4.1
First published (updated )

SAP SAP Commerce CloudInsecure Sample Credentials in SAP Commerce Cloud

Risk 69
Severity
9.1
First published (updated )

SAP SAP NetWeaver Application Server ABAPCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)

Risk 31
Severity
4.7
First published (updated )

SAP SAP NetWeaver Enterprise PortalCross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Risk 38
Severity
6.1
First published (updated )

SAP SAP HANA Extended Application Services classic model (User Self Service)Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)

Risk 20
Severity
3.7
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP NetWeaver Application Server Java (Configuration Wizard)Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)

Risk 53
Severity
8.2
First published (updated )

SAP SAP NetWeaver Application Server ABAPMemory Corruption vulnerability in SAP NetWeaver Application Server ABAP

Risk 86
Severity
9.9
First published (updated )

SAP SAP ApprouterOpen Redirect vulnerability in SAP Approuter

Risk 59
Severity
8.1
First published (updated )

SAP SAP ApprouterHTTP Request Smuggling in SAP Approuter

Risk 69
Severity
9.1
First published (updated )

SAP SAProuterDLL Hijacking vulnerability in SAProuter on Microsoft Windows

Risk 74
Severity
8.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerSAP fixes critical flaws in NetWeaver and Commerce Cloud

First published (updated )

SAP Wily Introscope Enterprise ManagerCross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager

Risk 31
Severity
4.7
First published (updated )

SAP BusinessObjects Business Intelligence platformEmail Spoofing vulnerability in SAP Business Objects Business Intelligence Platform

Risk 22
Severity
4.3
First published (updated )

SAP Operational Data Provisioning Data Replication API (ODP-RFC)Missing caller identification check-in for ODP Data Replication APIs

Risk 42
Severity
6.6
First published (updated )

SAP SAP NetWeaver Application Server ABAPMissing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Risk 50
Severity
7.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP MDG (Review Match Groups Application)Missing Authorization check in SAP MDG (Review Match Groups Application)

Risk 22
Severity
4.3
First published (updated )

SAP NetWeaver Application Server ABAPXML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform

Risk 86
Severity
9.9
First published (updated )

SAP NetWeaver AS Java (JDBC Test Servlet)Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)

Risk 38
Severity
6.1
First published (updated )

SAP SAP S/4HANA (On-Premise)SQL Injection vulnerability in SAP S/4HANA

Risk 38
Severity
6.5
First published (updated )

SAP BusinessObjectsSecurity Misconfiguration vulnerability in SAP Business Objects

Risk 20
Severity
3.7
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP NetWeaver Application Server Java (Web Container)Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)

Risk 78
Severity
9
First published (updated )

SAP SAP NetWeaver Application Server ABAPMemory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform

Risk 89
Severity
9.8
First published (updated )

SAP SAP Fiori LaunchpadPath Traversal Vulnerability in SAP Fiori (launchpad)

Risk 28
Severity
4.2
First published (updated )

SAP SAP GatewayInformation Disclosure vulnerability in SAP Gateway

Risk 22
Severity
4.3
First published (updated )

SAP NetWeaver Application Server ABAPCSS Injection vulnerability in SAP NetWeaver Application Server ABAP

Risk 22
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203