CVE Tools
Track your stack

Sap-se

639 CVEs tracked since 2023. Since Feb 2023, 2 of them reached CISA KEV.

Sap-se CVEs per month

Feb 2023 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Sap-se CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0240
2023-03no snapshot
2023-043 or fewer
2023-05140
2023-0670
2023-07180
2023-08160
2023-09120
2023-1060
2023-114 or fewer
2023-12160
2024-0170
2024-02130
2024-0370
2024-04110
2024-05130
2024-06110
2024-07180
2024-08170
2024-09200
2024-1050
2024-1180
2024-12110
2025-01140
2025-02170
2025-03200
2025-04201
2025-05201
2025-06160
2025-07280
2025-08160
2025-09210
2025-1090
2025-11180
2025-12120
2026-01200
2026-02270
2026-03130
2026-04170
2026-05160
2026-06120
2026-07160
2026-08350
2026-09180
2026-10200
2026-110

Products

The products that kept showing up in Sap-se's monthly top three, with their CVEs summed over those months.

  1. Sap Businessobjects Business Intelligence Platform169 months
  2. Sap Netweaver Application Server For Abap and Abap Platform123 months
  3. Sap Business AI Platform (Approuter)111 month
  4. Sap Netweaver Application Server For Abap83 months
  5. Sap Business Connector62 months
  6. Sap Commerce Cloud65 months
  7. Sap Enable Now63 months
  8. Sap Fiori App (Intercompany Balance Reconciliation)61 month
  9. Sap Manufacturing Integration and Intelligence62 months
  10. Sap Supplier Relationship Management (Live Auction Cockpit)51 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Sap-se.

  1. CVE-2026-89124Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)4.3
  2. CVE-2026-89122Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal6.1
  3. CVE-2026-89121Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)4.7
  4. CVE-2026-89120Missing authorization check in SAP ABAP Platform7.1
  5. CVE-2026-89118Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal5.3
  6. CVE-2026-89117Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal6.1
  7. CVE-2026-89116OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code5.9
  8. CVE-2026-89113SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)8.8
  9. CVE-2026-89112Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure6.5
  10. CVE-2026-89111OAuth2 SSRF vulnerability in SAP Cloud SDK for Python10.0
  11. CVE-2026-89110Broken Access Control in SAP NetWeaver Visual Composer9.9
  12. CVE-2026-89108Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)9.1
  13. CVE-2026-89107Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)9.9
  14. CVE-2026-89106Cross Site Scripting (XSS) vulnerability in SAPUI54.4
  15. CVE-2026-89105Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library4.2

The record

Peak rank
#35 in Aug 2026
Busiest month shown
Aug 2026, 35 CVEs
Months with a KEV entry
2 since Feb 2023
Monthly snapshots
42 since 2023
Sap-se's full record, month by month