SAP: known exploited vulnerabilities
14Catalog entries
3Ransomware use
2025-05-15Last added
2025-06-05Latest due date
Get an email when SAP is next added.Watch SAP
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-42999 | NetWeaver RANSOMWARE SAP NetWeaver Deserialization Vulnerability |
2025-06-05 |
| CVE-2025-31324 | NetWeaver RANSOMWARE SAP NetWeaver Unrestricted File Upload Vulnerability |
2025-05-20 |
| CVE-2017-12637 | NetWeaver SAP NetWeaver Directory Traversal Vulnerability |
2025-04-09 |
| CVE-2019-0344 | Commerce Cloud SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability |
2024-10-21 |
| CVE-2022-22536 | Multiple Products SAP Multiple Products HTTP Request Smuggling Vulnerability |
2022-09-08 |
| CVE-2016-2388 | NetWeaver SAP NetWeaver Information Disclosure Vulnerability |
2022-06-30 |
| CVE-2016-2386 | NetWeaver SAP NetWeaver SQL Injection Vulnerability |
2022-06-30 |
| CVE-2021-38163 | NetWeaver SAP NetWeaver Unrestricted File Upload Vulnerability |
2022-06-30 |
| CVE-2016-3976 | NetWeaver SAP NetWeaver Directory Traversal Vulnerability |
2022-05-03 |
| CVE-2020-6207 | Solution Manager SAP Solution Manager Missing Authentication for Critical Function Vulnerability |
2022-05-03 |
| CVE-2020-6287 | NetWeaver SAP NetWeaver Missing Authentication for Critical Function Vulnerability |
2022-05-03 |
| CVE-2016-9563 | NetWeaver SAP NetWeaver XML External Entity (XXE) Vulnerability |
2022-05-03 |
| CVE-2010-5326 | NetWeaver SAP NetWeaver Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2018-2380 | Customer Relationship Management (CRM) RANSOMWARE SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
2022-05-03 |