Vendor

SAP

14 known exploited

SAP news

No recent coverage.

Actively exploited

All 14 →
CVE-2025-42999RansomwareCVSS 9.1

SAP NetWeaver

SAP NetWeaver Deserialization Vulnerability

Added May 15, 2025Fed. due Jun 5, 2025
CVE-2025-31324RansomwareCVSS 9.8

SAP NetWeaver

SAP NetWeaver Unrestricted File Upload Vulnerability

Added Apr 29, 2025Fed. due May 20, 2025

SAP NetWeaver

SAP NetWeaver Directory Traversal Vulnerability

Added Mar 19, 2025Fed. due Apr 9, 2025

SAP Commerce Cloud

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Added Sep 30, 2024Fed. due Oct 21, 2024

SAP Multiple Products

SAP Multiple Products HTTP Request Smuggling Vulnerability

Added Aug 18, 2022Fed. due Sep 8, 2022

SAP NetWeaver

SAP NetWeaver SQL Injection Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022

SAP NetWeaver

SAP NetWeaver Unrestricted File Upload Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022

SAP NetWeaver

SAP NetWeaver Information Disclosure Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022
CVE-2010-5326CVSS 10.0

SAP NetWeaver

SAP NetWeaver Remote Code Execution Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022
CVE-2020-6287CVSS 10.0

SAP NetWeaver

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022

SAP Solution Manager

SAP Solution Manager Missing Authentication for Critical Function Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022

SAP NetWeaver

SAP NetWeaver Directory Traversal Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022
CVE-2018-2380RansomwareCVSS 6.6

SAP Customer Relationship Management (CRM)

SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022

SAP NetWeaver

SAP NetWeaver XML External Entity (XXE) Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022

Products