Skip to content
THREATWIRE

CVE Tracker · Vendor

SAP CVEs

14 CVEs in the tracker, 14 in the CISA KEV catalogue.

All vendors · RSS feed for SAP · Tracker data last updated 18 Oct 2026.

Showing 14 of 14

  1. CVE-2025-31324CVSS 9.8 criticalEPSS 99.5%KEV2025-04-24

    NetWeaver. SAP NetWeaver Unrestricted File Upload Vulnerability

  2. CVE-2020-6207CVSS 9.8 criticalEPSS 98.1%KEV2020-03-10

    Solution Manager. SAP Solution Manager Missing Authentication for Critical Function Vulnerability

  3. CVE-2025-42999No CVSSEPSS 12.7%KEV

    NetWeaver. SAP NetWeaver Deserialization Vulnerability

  4. CVE-2022-22536No CVSSEPSS 97.9%KEV

    Multiple Products. SAP Multiple Products HTTP Request Smuggling Vulnerability

  5. CVE-2021-38163No CVSSEPSS 36.9%KEV

    NetWeaver. SAP NetWeaver Unrestricted File Upload Vulnerability

  6. CVE-2020-6287No CVSSEPSS 94.7%KEV

    NetWeaver. SAP NetWeaver Missing Authentication for Critical Function Vulnerability

  7. CVE-2019-0344No CVSSEPSS 7.08%KEV

    Commerce Cloud. SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

  8. CVE-2018-2380No CVSSEPSS 28.9%KEV

    Customer Relationship Management (CRM). SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

  9. CVE-2017-12637No CVSSEPSS 95.1%KEV

    NetWeaver. SAP NetWeaver Directory Traversal Vulnerability

  10. CVE-2016-9563No CVSSEPSS 24.2%KEV

    NetWeaver. SAP NetWeaver XML External Entity (XXE) Vulnerability

  11. CVE-2016-3976No CVSSEPSS 47.3%KEV

    NetWeaver. SAP NetWeaver Directory Traversal Vulnerability

  12. CVE-2016-2388No CVSSEPSS 52.2%KEV

    NetWeaver. SAP NetWeaver Information Disclosure Vulnerability

  13. CVE-2016-2386No CVSSEPSS 71.5%KEV

    NetWeaver. SAP NetWeaver SQL Injection Vulnerability

  14. CVE-2010-5326No CVSSEPSS 17.8%KEV

    NetWeaver. SAP NetWeaver Remote Code Execution Vulnerability