Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how sap compares to other vendors in security performance

View Risk Score →

Software

sap netweaver
72
sap netweaver as abap
58
sap 3d visual enterprise viewer
57
sap businessobjects business intelligence platform
46
sap businessobjects
41
sap netweaver as for java
33
sap s/4hana
31
sap businessobjects business intelligence
28
sap netweaver application server abap
23
sap abap
22
sap netweaver (enterprise portal)
22
sap netweaver application server
20
sap hana database
16
sap netweaver process integration
16
sap internet graphics server
13
sap netweaver solution manager
13
sap crm - webclient ui
12
sap 3d visual enterprise author
11
sap enable now
11
sap business one on hana
10
sap commerce cloud
10
sap customer relationship management
10
sap hana extended application services, advanced model
10
sap sap web application server
10
sap supplier relationship management
10
sap business connector
9
sap commerce
9
sap netweaver application server java
8
sap netweaver as internet graphics server
8
sap disclosure management
7
sap erp
7
sap gui
7
sap host agent
7
sap internet transaction server
7
sap netweaver application server for abap
7
sap abap platform
6
sap business one
6
sap businessobjects financial consolidation
6
sap commerce cloud (formerly sap hybris)
6
sap hana extended application services
6
sap j2ee engine
6
sap fiori
5
sap fiori launchpad
5
sap hana sps09
5
sap netweaver java application server
5
sap business warehouse
4
sap financial consolidation
4
sap mobile platform sdk
4
sap s/4hana (sap s4fnd, sap s4core)
4
sap sapscore
4

SAP SAP S/4HANAMissing Authorization check in SAP S/4HANA (Draft operation)

Risk 22
Severity
4.3
First published (updated )
CVE-2026-44771

SAP SAP S/4HANAMissing Authorization check in SAP S/4 HANA (Create Single Payment)

Risk 22
Severity
4.3
First published (updated )
CVE-2026-44770

SAP SAP S/4HANA Project Management (PPM-PRO)SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)

Risk 44
Severity
5.5
First published (updated )
CVE-2026-44769

SAP SAP CRM WebClient UISecurity misconfiguration in SAP CRM (WebClient UI)

Risk 21
Severity
4.1
First published (updated )
CVE-2026-44768

SAP SAP NetWeaver Application Server ABAPCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)

Risk 31
Severity
4.7
First published (updated )
CVE-2026-44760
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP NetWeaver Enterprise PortalCross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

Risk 38
Severity
6.1
First published (updated )
CVE-2026-44759

SAP Wily Introscope Enterprise ManagerCross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager

Risk 31
Severity
4.7
First published (updated )
CVE-2026-44757

SAP BusinessObjects Business Intelligence platformEmail Spoofing vulnerability in SAP Business Objects Business Intelligence Platform

Risk 22
Severity
4.3
First published (updated )
CVE-2026-44755

SAP Operational Data Provisioning Data Replication API (ODP-RFC)Missing caller identification check-in for ODP Data Replication APIs

Risk 42
Severity
6.6
First published (updated )
CVE-2026-44754

SAP SAP MDG (Review Match Groups Application)Missing Authorization check in SAP MDG (Review Match Groups Application)

Risk 22
Severity
4.3
First published (updated )
CVE-2026-44750
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP NetWeaver AS Java (JDBC Test Servlet)Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)

Risk 38
Severity
6.1
First published (updated )
CVE-2026-44746

SAP SAP S/4HANA (On-Premise)SQL Injection vulnerability in SAP S/4HANA

Risk 38
Severity
6.5
First published (updated )
CVE-2026-44744

SAP SAP Fiori LaunchpadPath Traversal Vulnerability in SAP Fiori (launchpad)

Risk 28
Severity
4.2
First published (updated )
CVE-2026-24315

SAP SAP GatewayInformation Disclosure vulnerability in SAP Gateway

Risk 22
Severity
4.3
First published (updated )
CVE-2026-44749

SAP NetWeaver Application Server ABAPCSS Injection vulnerability in SAP NetWeaver Application Server ABAP

Risk 22
Severity
4.3
First published (updated )
CVE-2026-27680
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP Business Server Pages Application (TAF_APPLAUNCHER)Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)

Risk 38
Severity
6.1
First published (updated )
CVE-2026-40137

SAP SAP Financial ConsolidationDenial of service (DoS) in SAP Financial Consolidation

Risk 22
Severity
4.3
First published (updated )
CVE-2026-40136

SAP NetWeaver Application Server ABAPOS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

Risk 49
Severity
6.5
First published (updated )
CVE-2026-40135

SAP SAP Incentive and Commission ManagementMissing Authorization Check in SAP Incentive and Commission Management

Risk 22
Severity
4.3
First published (updated )
CVE-2026-40134

SAP SAP S/4HANA Condition MaintenanceMissing Authorization check in SAP S/4HANA Condition Maintenance

Risk 46
Severity
6.3
First published (updated )
CVE-2026-40133
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP SAP Strategic Enterprise Management (Balanced Scorecard Wizard - BSP application)Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard)

Risk 34
Severity
5.4
First published (updated )
CVE-2026-40132

SAP SAP Application Server ABAPCode Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform

Risk 22
Severity
4.3
First published (updated )
CVE-2026-40129

SAP SAPUI5 Search UIContent Spoofing vulnerability in SAPUI5 (Search UI)

Risk 24
Severity
4.7
First published (updated )
CVE-2026-34258

SAP NetWeaver Application Server ABAPReflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)

Risk 38
Severity
6.1
First published (updated )
CVE-2026-27682

SAP BusinessObjects Business Intelligence platformCross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform

Risk 34
Severity
5.4
First published (updated )
CVE-2026-0502
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SAP Human Capital ManagementInformation Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA

Risk 38
Severity
6.5
First published (updated )
CVE-2026-34264

SAP HANA Database ExplorerInformation Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer

Risk 26
Severity
5
First published (updated )
CVE-2026-34262

SAP SAP Business AnalyticsMissing Authorization check in SAP Business Analytics and SAP Content Management

Risk 38
Severity
6.5
First published (updated )
CVE-2026-34261

SAP NetWeaver Application Server ABAPOpen Redirect vulnerability in SAP NetWeaver Application Server ABAP

Risk 38
Severity
6.1
First published (updated )
CVE-2026-34257

SAP BusinessObjects Business Intelligence platformReflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

Risk 21
Severity
4.1
First published (updated )
CVE-2026-27683
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203