Product by SAP
Software
45 known vulnerabilities in Software (SAP), 0 of them actively exploited (CISA KEV).
Key figures
45
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-89126 | Memory Corruption vulnerability in SAP Web Dispatcher | 10.0 | |
| Critical | CVE-2026-76964 | Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) | 10.0 | |
| Critical | CVE-2026-109795 | Missing authorization check in S4CRM | 9.9 | |
| Critical | CVE-2026-109803 | Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) | 9.9 | |
| Critical | CVE-2026-89103 | Broken Access Control in SAP Gateway | 10.0 | |
| Critical | CVE-2026-76965 | OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform | 9.9 | |
| Critical | CVE-2026-120017 | Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) | 10.0 | |
| High | CVE-2026-120009 | Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview) | 7.2 | |
| High | CVE-2026-120013 | Path Traversal in Agent Memory Module of SAP Cloud SDK for Python | 7.5 | |
| Critical | CVE-2026-109798 | SAP Software: Improper Restriction of XML External Entity Reference | 9.1 | |
| Critical | CVE-2026-89119 | SAP Web Dispatcher and Internet Communication Manager: Cross-Site Request Forgery (CSRF) | 9.6 | |
| High | CVE-2026-120010 | Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server) | 7.5 | |
| High | CVE-2026-76966 | Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform | 8.9 | |
| High | CVE-2026-120015 | Insufficient Input Validation in SAP Host Agent | 7.5 | |
| High | CVE-2026-109807 | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) | 7.5 | |
| High | CVE-2026-109806 | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) | 7.5 | |
| High | CVE-2026-109794 | SAP Software: Infinite Loop | 7.5 | |
| High | CVE-2026-109793 | SAP Software: Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2026-120008 | Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service) | 8.2 | |
| High | CVE-2026-109804 | Information Disclosure in SAP NetWeaver (SAP Message Server) | 7.5 | |
| High | CVE-2026-109800 | Memory Corruption vulnerability in SAP Web Dispatcher | 7.7 | |
| High | CVE-2026-89114 | Missing Authentication check in SAP NetWeaver AS Java EDM Application | 7.5 | |
| High | CVE-2026-73635 | Apache Struts: Unbounded growth of localized-text caches driven by the request locale | 7.5 | |
| High | CVE-2026-76973 | SAP NetWeaver and ABAP Platform (SAP Message Server): Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2026-76970 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | 7.5 |