This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

SAP SE

Number 19 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Combines these spellings from source records: SAP SE, SAP_SE

Compare with another vendor

Total vulnerabilities

1,464

Critical

122

High

213

Known Exploited

8

Exploit available

1

Network, no login needed

41.1%

Of 1,128 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)2363650131190
20252122535137150
2024141521102130
202310110265780
2022176310130150
20211981535115330
2020218263315252
20191221000121
2018601321233

Top products

ProductTotalCritical/High
SAP 3D Visual Enterprise Viewer1265
SAP BusinessObjects Business Intelligence Platform295
SAP 3D Visual Enterprise Author271
SAP NetWeaver Enterprise Portal202
SAP Business One185
SAP NetWeaver Application Server for ABAP and ABAP Platform172
SAP Enable Now160
SAP Business Objects Business Intelligence Platform152
SAP NetWeaver AS ABAP and ABAP Platform156
SAP Commerce148

Top bug types

Bug typeTotalCritical/High
Missing Authorization16626
Cross-Site Scripting13212
Memory Corruption8731
Code Injection3523
Information Disclosure265
Path Traversal2310
Authentication Issues2210
Improper Input Validation221
Incorrect Authorization227
Server-Side Request Forgery215

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2025-42999Insecure Deserialization in SAP NetWeaver (Visual Composer development server)Critical12.9%
CVE-2025-31324Missing Authorization check in SAP NetWeaver (Visual Composer development server)Critical99.5%
CVE-2022-22536SAP SE SAP NetWeaver and ABAP Platform vulnerabilityCritical97.9%
CVE-2021-38163SAP SE SAP NetWeaver (Visual Composer 7.0 RT): Path TraversalCritical36.9%
CVE-2020-6287SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard): Authentication IssuesCritical94.7%
CVE-2020-6207SAP SE SAP Solution Manager (User Experience Monitoring): Authentication IssuesCritical98.1%
CVE-2019-0344SAP SE SAP Commerce Cloud (virtualjdbc extension): Insecure DeserializationCritical7.5%
CVE-2018-2380SAP SE SAP CRM: Path TraversalMedium28.9%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-89131Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise PortalMedium0.1%
CVE-2026-89129Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)Medium0.3%
CVE-2026-89128Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool)Medium0.2%
CVE-2026-89126Memory Corruption vulnerability in SAP Web DispatcherCritical0.4%
CVE-2026-89125Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication ManagerMedium0.3%
CVE-2026-89119Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication ManagerCritical0.1%
CVE-2026-89115Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management ConsoleMedium0.2%
CVE-2026-89114Missing Authentication check in SAP NetWeaver AS Java EDM ApplicationHigh0.3%
CVE-2026-89103Broken Access Control in SAP GatewayCritical0.3%
CVE-2026-76973Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server)High0.3%