Vulnerabilities in SAP_SE

644 results
CVE-2025-31324CRITICALMissing Authorization check in SAP NetWeaver (Visual Composer development server)EPSS 99.5%KEVCVE-2024-41730CRITICALMissing Authentication check in SAP BusinessObjects Business Intelligence PlatformEPSS 75.9%CVE-2025-42999CRITICALInsecure Deserialization in SAP NetWeaver (Visual Composer development server)EPSS 12.9%KEVCVE-2025-42928CRITICALDeserialization Vulnerability in SAP jConnect - SDK for ASEEPSS 9.5%CVE-2023-37483CRITICALImproper Access Control Vulnerabilities in SAP PowerDesignerEPSS 4.8%CVE-2025-42880CRITICALCode Injection vulnerability in SAP Solution ManagerEPSS 4.5%CVE-2023-40310MEDIUMMissing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 importEPSS 3.6%CVE-2024-47586MEDIUMNULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformEPSS 3.5%CVE-2025-42944CRITICALInsecure Deserialization vulnerability in SAP Netweaver (RMI-P4)EPSS 3.0%CVE-2023-40621MEDIUMCode Injection vulnerability in SAP PowerDesigner ClientEPSS 2.9%CVE-2023-37484MEDIUMInformation Disclosure Vulnerabilities in SAP PowerDesignerEPSS 2.0%CVE-2025-42957CRITICALCode Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)EPSS 1.7%CVE-2024-22127CRITICALCode Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)EPSS 1.6%CVE-2026-44756CRITICALMemory Corruption vulnerability in SAP Extended Passport (EPP) ProcessingEPSS 1.4%CVE-2026-40135MEDIUMOS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformEPSS 1.4%CVE-2023-50422CRITICALEscalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)EPSS 1.4%CVE-2023-50424CRITICALEscalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go)EPSS 1.1%CVE-2023-50423CRITICALEscalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)EPSS 1.1%CVE-2023-49583CRITICALEscalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)EPSS 1.1%CVE-2024-22131CRITICALCode Injection vulnerability in SAP ABA (Application Basis)EPSS 1.1%