CVE Tools
Track your stack

Sap

1,553 CVEs across 152 months on the top 200 list since May 2003. Peak rank #1 in Nov 2003. 12 of them are now in CISA KEV.

Sap CVEs per month since May 2003

Dec 2021 to Nov 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 55, Oct 2022
Dec 2021: 13 CVEs · 3 critical · 0 now in CISA KEV · rank #47 · mostly 3d Visual Enterprise Viewer, Netweaver Application Server Abap, Businessobjects Business Intelligence PlatformJan 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #115 · mostly S\/4hana, Enterprise Threat Detection, Netweaver AbapFeb 2022: 15 CVEs · 3 critical · 1 now in CISA KEV · rank #48 · mostly 3d Visual Enterprise Viewer, Netweaver Application Server Java, Netweaver AbapMar 2022: 12 CVEs · 1 critical · 0 now in CISA KEV · rank #55 · mostly Netweaver Enterprise Portal, Simple Diagnostics Agent, Focused RunApr 2022: 19 CVEs · 0 critical · 0 now in CISA KEV · rank #34 · mostly 3d Visual Enterprise Viewer, Businessobjects Business Intelligence Platform, NetweaverMay 2022: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #89 · mostly Netweaver Application Server Abap, Netweaver As Abap Kernel, Netweaver As Abap KRNL64UCJun 2022: 21 CVEs · 1 critical · 0 now in CISA KEV · rank #31 · mostly 3d Visual Enterprise Viewer, Adaptive Server Enterprise, Netweaver AbapJul 2022: 21 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly Sap Business Objects Business Intelligence Platform, Netweaver Enterprise Portal, Business OneAug 2022: below the top 200 that month, 3 or fewer CVEsSep 2022: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #71 · mostly Netweaver Application Server Abap, Businessobjects Business Intelligence, Access ControlOct 2022: 55 CVEs · 1 critical · 0 now in CISA KEV · rank #11 · mostly 3d Visual Enterprise Author, 3d Visual Enterprise Viewer, Businessobjects Business IntelligenceNov 2022: 11 CVEs · 0 critical · 0 now in CISA KEV · rank #74 · mostly Financial Consolidation, Netweaver Application Server Abap, Sap SQL AnywhereDec 2022: 13 CVEs · 3 critical · 0 now in CISA KEV · rank #52 · mostly Business Objects Business Intelligence Platform, Solution Manager, Netweaver Process IntegrationJan 2023: 9 CVEs · 5 critical · 0 now in CISA KEV · rank #66 · mostly Businessobjects Business Intelligence Platform, Netweaver Application Server Abap, Businessobjects Business Intelligence Platform (Central Management Console)Feb 2023: 22 CVEs · 0 critical · 0 now in CISA KEV · rank #38 · mostly Netweaver Application Server Abap, Solution Manager, Netweaver As Abap (Bsp Framework)Mar 2023: no snapshot, the run for this month failedApr 2023: 19 CVEs · 3 critical · 0 now in CISA KEV · rank #45 · mostly Application Interface Framework, S4CORE, Application Interface Framework (Message Dashboard)May 2023: 14 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Businessobjects Business Intelligence, Customer Relationship Management Webclient Ui, Customer Relationship Management S4FNDJun 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #94 · mostly Netweaver, Sap Netweaver, Digital ManufacturingJul 2023: 18 CVEs · 1 critical · 0 now in CISA KEV · rank #46 · mostly Enable Now, Sap Enable Now, Sap Netweaver Process IntegrationAug 2023: 16 CVEs · 1 critical · 0 now in CISA KEV · rank #58 · mostly Powerdesigner, Sap Business One, Sap PowerdesignerSep 2023: 14 CVEs · 2 critical · 0 now in CISA KEV · rank #55 · mostly Netweaver Application Server Abap, Businessobjects Business Intelligence, Hana DatabaseOct 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #111 · mostly Sap S/4 Hana, S\/4hana, Enable Now Enable Now Consump DelNov 2023: below the top 200 that month, 4 or fewer CVEsDec 2023: 16 CVEs · 4 critical · 0 now in CISA KEV · rank #51 · mostly Biller Direct, Business Objects Business Intelligence Platform, Businessobjects Web IntelligenceJan 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #110 · mostly Sap Web Dispatcher, Application Interface Framework, Gui ConnectorFeb 2024: 13 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Crm - Webclient Ui, Sap Crm Webclient Ui, Netweaver Application Server JavaMar 2024: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Abap Platform, Fiori Front End Server, NetweaverApr 2024: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #148 · mostly Businessobjects Web Intelligence, Netweaver, Sap Abap PlatformMay 2024: below the top 200 that month, 5 or fewer CVEsJun 2024: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #72 · mostly Netweaver Application Server Java, Bw\/4hana, Customer Relationship Management Webclient UiJul 2024: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly Customer Relationship Management Webclient Ui, Customer Relationship Management S4FND, Sap BasisAug 2024: 17 CVEs · 1 critical · 0 now in CISA KEV · rank #50 · mostly Sap Business Objects Business Intelligence Platform, Business Objects Business Intelligence Platform, Sap Netweaver As AbapSep 2024: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #74 · mostly Sap Abap Platform, Sap Netweaver Application Server, Sap Business WarehouseOct 2024: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #156 · mostly Hana-client, Businessobjects Business Intelligence, Commerce BackofficeNov 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #135 · mostly Sap Netweaver Java Application Server, Sap Netweaver As Abap, Host AgentDec 2024: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #60 · mostly Sap Netweaver As Java, Sap Human Capital Management (Hcm), Sap Netweaver AdministratorJan 2025: 14 CVEs · 2 critical · 0 now in CISA KEV · rank #54 · mostly Sap Basis, Sap Netweaver Application Server For Abap and Abap Platform, Sap Netweaver Application ServerFeb 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #147 · mostly Businessobjects Business Intelligence Platform, Sap Basis, Sap Business Objects Business Intelligence PlatformMar 2025: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #58 · mostly Sap Business Objects Business Intelligence Platform, Sap Netweaver Application Server, Sap S/4 HanaApr 2025: 20 CVEs · 4 critical · 1 now in CISA KEV · rank #43 · mostly Sap Netweaver, Sap S/4 Hana, Sap Commerce CloudMay 2025: 6 CVEs · 2 critical · 1 now in CISA KEV · rank #136 · mostly Supplier Relationship Management, Sap Supplier Relationship Management, Sap NetweaverJun 2025: 16 CVEs · 1 critical · 0 now in CISA KEV · rank #55 · mostly Sap S/4hana, Sap Mdm Server, Sap NetweaverJul 2025: 29 CVEs · 5 critical · 0 now in CISA KEV · rank #40 · mostly Sap Netweaver, Sap Business Warehouse, SapcarAug 2025: 15 CVEs · 2 critical · 0 now in CISA KEV · rank #61 · mostly Sap S/4hana, Sap Netweaver Application Server, Sap Netweaver Application Server Abap (Documento Bic)Sep 2025: 14 CVEs · 3 critical · 0 now in CISA KEV · rank #58 · mostly Sap Hcm, Sap Netweaver As Java, Sap NetweaverOct 2025: below the top 200 that month, 4 or fewer CVEsNov 2025: 18 CVEs · 2 critical · 0 now in CISA KEV · rank #46 · mostly Business Connector, Sap Business Connector (Sap Bc), Sap Netweaver Application Server For Abap and Abap PlatformDec 2025: 12 CVEs · 2 critical · 0 now in CISA KEV · rank #76 · mostly Sap Netweaver Internet Communication Manager, Sap Web Dispatcher, Sap Netweaver Enterprise PortalJan 2026: 14 CVEs · 4 critical · 0 now in CISA KEV · rank #71 · mostly Sap S/4hana, Sap Fiori App (Intercompany Balance Reconciliation), Hana DatabaseFeb 2026: 27 CVEs · 2 critical · 0 now in CISA KEV · rank #38 · mostly Businessobjects Business Intelligence Platform, S4CORE, Solution Tools Plug-inMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: 10 CVEs · 1 critical · 0 now in CISA KEV · rank #110 · mostly Sap Netweaver Java Application Server, Sap S/4hana, Sap Human Capital Management (Hcm)May 2026: below the top 200 that month, 7 or fewer CVEsJun 2026: below the top 200 that month, 7 or fewer CVEsJul 2026: below the top 200 that month, 7 or fewer CVEsAug 2026: below the top 200 that month, 8 or fewer CVEsSep 2026: below the top 200 that month, 9 or fewer CVEsOct 2026: below the top 200 that month, 11 or fewer CVEsNov 2026: below the top 200 that month, 3 or fewer CVEs

In the lens

The products that kept showing up in Sap's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.

  1. 3d Visual Enterprise Viewer385 months
  2. 3d Visual Enterprise Author261 month
  3. Netweaver Application Server Abap217 months
  4. Sap Netweaver166 months
  5. Businessobjects Business Intelligence Platform135 months
  6. Sap Business Objects Business Intelligence Platform134 months
  7. Businessobjects Business Intelligence125 months
  8. Sap S/4hana114 months
  9. Sap Netweaver Application Server104 months
  10. Business Objects Business Intelligence Platform83 months

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#1 in Nov 2003
Busiest month
Oct 2022, 55 CVEs
Months with a KEV entry
11 of 152 on the list
On the top 200 list
152 of 264 monthly snapshots

Each monthly snapshot keeps the top 200 vendors by CVEs. A month below the cut shows the most it could have had: the smallest count that made the list. 19 months have no snapshot because the run failed.

MethodologyAll months on recordThe Sap hub