https://vulnogram.org/ Most recent CVEs assigned by SAP SE (sap). https://vulnogram.org/seaview/icons/sap.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-89124 https://vulnogram.org/CVE-2026-89124 Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended author… Medium Tue, 13 Oct 2026 00:27:37 GMT https://vulnogram.org/CVE-2026-89122 https://vulnogram.org/CVE-2026-89122 SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted applicat… Medium Network Exploitable Tue, 13 Oct 2026 00:27:29 GMT https://vulnogram.org/CVE-2026-89121 https://vulnogram.org/CVE-2026-89121 SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to mo… Medium Tue, 13 Oct 2026 00:27:19 GMT https://vulnogram.org/CVE-2026-89120 https://vulnogram.org/CVE-2026-89120 A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass… High Tue, 13 Oct 2026 00:27:10 GMT https://vulnogram.org/CVE-2026-89118 https://vulnogram.org/CVE-2026-89118 SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of… Medium Network Exploitable Tue, 13 Oct 2026 00:27:00 GMT https://vulnogram.org/CVE-2026-89117 https://vulnogram.org/CVE-2026-89117 SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft o… Medium Network Exploitable Tue, 13 Oct 2026 00:26:50 GMT https://vulnogram.org/CVE-2026-89116 https://vulnogram.org/CVE-2026-89116 The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installat… Medium Tue, 13 Oct 2026 00:26:39 GMT https://vulnogram.org/CVE-2026-89113 https://vulnogram.org/CVE-2026-89113 SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Suc… High Tue, 13 Oct 2026 00:26:24 GMT https://vulnogram.org/CVE-2026-89112 https://vulnogram.org/CVE-2026-89112 The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could poten… Medium Tue, 13 Oct 2026 00:26:06 GMT https://vulnogram.org/CVE-2026-89111 https://vulnogram.org/CVE-2026-89111 The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client cr… Critical Network Exploitable Tue, 13 Oct 2026 00:24:28 GMT https://vulnogram.org/CVE-2026-89110 https://vulnogram.org/CVE-2026-89110 SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection conf… Critical Tue, 13 Oct 2026 00:24:17 GMT https://vulnogram.org/CVE-2026-89108 https://vulnogram.org/CVE-2026-89108 SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an… Critical Tue, 13 Oct 2026 00:24:05 GMT https://vulnogram.org/CVE-2026-89107 https://vulnogram.org/CVE-2026-89107 SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could s… Critical Tue, 13 Oct 2026 00:23:52 GMT https://vulnogram.org/CVE-2026-89106 https://vulnogram.org/CVE-2026-89106 SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentia… Medium Tue, 13 Oct 2026 00:23:40 GMT https://vulnogram.org/CVE-2026-89105 https://vulnogram.org/CVE-2026-89105 The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthori… Medium Tue, 13 Oct 2026 00:23:29 GMT https://vulnogram.org/CVE-2026-76976 https://vulnogram.org/CVE-2026-76976 Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If the victim i… Medium Tue, 13 Oct 2026 00:23:12 GMT https://vulnogram.org/CVE-2026-76975 https://vulnogram.org/CVE-2026-76975 Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled inpu… Medium Network Exploitable Tue, 13 Oct 2026 00:22:58 GMT https://vulnogram.org/CVE-2026-76972 https://vulnogram.org/CVE-2026-76972 Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this st… Medium Tue, 13 Oct 2026 00:22:44 GMT https://vulnogram.org/CVE-2026-58249 https://vulnogram.org/CVE-2026-58249 SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, ca… High Network Exploitable Tue, 13 Oct 2026 00:22:31 GMT https://vulnogram.org/CVE-2026-58242 https://vulnogram.org/CVE-2026-58242 SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could all… Low Tue, 13 Oct 2026 00:22:03 GMT https://vulnogram.org/CVE-2026-76974 https://vulnogram.org/CVE-2026-76974 SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled content from an ext… Medium Network Exploitable Tue, 22 Sep 2026 00:28:40 GMT https://vulnogram.org/CVE-2026-76977 https://vulnogram.org/CVE-2026-76977 SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's page and inter… Medium Network Exploitable Tue, 08 Sep 2026 00:13:17 GMT https://vulnogram.org/CVE-2026-76971 https://vulnogram.org/CVE-2026-76971 Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined… Medium Tue, 08 Sep 2026 00:13:07 GMT https://vulnogram.org/CVE-2026-76969 https://vulnogram.org/CVE-2026-76969 @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials a… Critical Network Exploitable Tue, 08 Sep 2026 00:12:55 GMT https://vulnogram.org/CVE-2026-76968 https://vulnogram.org/CVE-2026-76968 SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting i… Medium Tue, 08 Sep 2026 00:12:42 GMT https://vulnogram.org/CVE-2026-76967 https://vulnogram.org/CVE-2026-76967 SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. W… High Tue, 08 Sep 2026 00:12:32 GMT https://vulnogram.org/CVE-2026-76963 https://vulnogram.org/CVE-2026-76963 Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposu… Medium Tue, 08 Sep 2026 00:12:21 GMT https://vulnogram.org/CVE-2026-76962 https://vulnogram.org/CVE-2026-76962 SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessibl… Medium Tue, 08 Sep 2026 00:12:10 GMT https://vulnogram.org/CVE-2026-76961 https://vulnogram.org/CVE-2026-76961 SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim inte… Low Tue, 08 Sep 2026 00:12:01 GMT https://vulnogram.org/CVE-2026-76960 https://vulnogram.org/CVE-2026-76960 SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim inte… Low Tue, 08 Sep 2026 00:11:51 GMT https://vulnogram.org/CVE-2026-76959 https://vulnogram.org/CVE-2026-76959 SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim inter… Medium Tue, 08 Sep 2026 00:11:41 GMT https://vulnogram.org/CVE-2026-76958 https://vulnogram.org/CVE-2026-76958 SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declar… High Tue, 08 Sep 2026 00:11:29 GMT https://vulnogram.org/CVE-2026-66768 https://vulnogram.org/CVE-2026-66768 SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected fun… Critical Tue, 08 Sep 2026 00:11:15 GMT https://vulnogram.org/CVE-2026-66767 https://vulnogram.org/CVE-2026-66767 SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow… High Network Exploitable Tue, 08 Sep 2026 00:11:06 GMT https://vulnogram.org/CVE-2026-58240 https://vulnogram.org/CVE-2026-58240 SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to registe… Critical Network Exploitable Tue, 08 Sep 2026 00:10:55 GMT https://vulnogram.org/CVE-2026-58234 https://vulnogram.org/CVE-2026-58234 SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness… Low Tue, 08 Sep 2026 00:10:43 GMT https://vulnogram.org/CVE-2026-44766 https://vulnogram.org/CVE-2026-44766 SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access… Medium Tue, 08 Sep 2026 00:10:34 GMT https://vulnogram.org/CVE-2026-44756 https://vulnogram.org/CVE-2026-44756 A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting i… Critical Network Exploitable Tue, 08 Sep 2026 00:10:16 GMT https://vulnogram.org/CVE-2026-66766 https://vulnogram.org/CVE-2026-66766 SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affect… High Network Exploitable Tue, 25 Aug 2026 01:08:36 GMT https://vulnogram.org/CVE-2026-58231 https://vulnogram.org/CVE-2026-58231 SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and co… Critical Network Exploitable Tue, 11 Aug 2026 10:21:29 GMT https://vulnogram.org/CVE-2026-66779 https://vulnogram.org/CVE-2026-66779 Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input i… Medium Tue, 11 Aug 2026 00:20:00 GMT https://vulnogram.org/CVE-2026-66778 https://vulnogram.org/CVE-2026-66778 SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This resul… Medium Network Exploitable Tue, 11 Aug 2026 00:19:50 GMT https://vulnogram.org/CVE-2026-66777 https://vulnogram.org/CVE-2026-66777 SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass a… Medium Tue, 11 Aug 2026 00:19:41 GMT https://vulnogram.org/CVE-2026-66776 https://vulnogram.org/CVE-2026-66776 SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could send a specially crafted request that bypasses the integrity check and load… Medium Tue, 11 Aug 2026 00:19:30 GMT https://vulnogram.org/CVE-2026-66775 https://vulnogram.org/CVE-2026-66775 SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a victim into following it. Successful exploitation could allow the attacke… Medium Network Exploitable Tue, 11 Aug 2026 00:19:20 GMT https://vulnogram.org/CVE-2026-66774 https://vulnogram.org/CVE-2026-66774 SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's c… Low Network Exploitable Tue, 11 Aug 2026 00:19:10 GMT https://vulnogram.org/CVE-2026-66773 https://vulnogram.org/CVE-2026-66773 A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability… Medium Tue, 11 Aug 2026 00:18:58 GMT https://vulnogram.org/CVE-2026-66772 https://vulnogram.org/CVE-2026-66772 SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain lim… Medium Tue, 11 Aug 2026 00:18:49 GMT https://vulnogram.org/CVE-2026-66771 https://vulnogram.org/CVE-2026-66771 SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes. When another user subsequently opens the adapted application, the injected script executes in the victim's browser sess… Medium Tue, 11 Aug 2026 00:18:39 GMT https://vulnogram.org/CVE-2026-66770 https://vulnogram.org/CVE-2026-66770 Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL (Data Definition Language) string into the underlying database without further authorization. Successful exploitation could a… Medium Tue, 11 Aug 2026 00:18:10 GMT