Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,133All CVEsplus 19,158 rejected
- 675Last 24 hours4,822 in the last 7 days
- 18,812Last 30 days1,603 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 36 | 50 | 131 | 19 | 0 | 236 | 1,626 |
| 2025 | 25 | 35 | 137 | 15 | 0 | 212 | 1,390 |
| 2024 | 5 | 21 | 102 | 13 | 0 | 141 | 1,178 |
| 2023 | 23 | 33 | 99 | 12 | 0 | 167 | 1,037 |
| 2022 | 11 | 70 | 107 | 2 | 0 | 190 | 870 |
| 2021 | 20 | 43 | 129 | 6 | 0 | 198 | 680 |
| 2020 | 26 | 33 | 154 | 5 | 0 | 218 | 482 |
| 2019 | 10 | 42 | 69 | 2 | 0 | 123 | 264 |
| 2018 | 4 | 48 | 74 | 3 | 0 | 129 | 141 |
| 2017 | 1 | 4 | 7 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-120013 | Path Traversal in Agent Memory Module of SAP Cloud SDK for PythonSAP_SE · SAP Cloud SDK for Python | High7.5 |
| CVE-2026-120012 | Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript)SAP_SE · SAP Cloud SDK for AI(JavaScript) | High7.5 |
| CVE-2026-109799 | Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))SAP_SE · SAP Cloud SDK for Python | High7.5 |
| CVE-2026-109797 | Cross-tenant sandbox takeover in SAP/astonishSAP_SE · SAP/astonish | High7.1 |
| CVE-2026-109805 | Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE · SAP NetWeaver and ABAP Platform (Application Server ABAP) | Medium6.4 |
| CVE-2026-89125 | Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication ManagerSAP_SE · SAP Web Dispatcher and Internet Communication Manager | Medium6.0 |
| CVE-2026-120017 | Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)SAP_SE · SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) | Critical10.0 |
| CVE-2026-120016 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual ComposerSAP_SE · SAP NetWeaver Visual Composer | Medium6.1 |
| CVE-2026-120015 | Insufficient Input Validation in SAP Host AgentSAP_SE · SAP Host Agent | High7.5 |
| CVE-2026-120014 | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication ManagerSAP_SE · SAP Web Dispatcher and Internet Communication Manager | High7.6 |
| CVE-2026-120010 | Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)SAP_SE · SAP NetWeaver Application Server (SAP Message Server) | High7.5 |
| CVE-2026-120009 | Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview)SAP_SE · SAP ABAP Developer Tools (AMDP Data Preview) | High7.2 |
| CVE-2026-120008 | Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)SAP_SE · SAP NetWeaver (Internet Graphics Service) | High8.2 |
| CVE-2026-109811 | Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE · SAP NetWeaver and ABAP Platform (Application Server ABAP) | Medium6.5 |
| CVE-2026-109810 | CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)SAP_SE · SAP NetWeaver Application Server Java (Web Dynpro Java) | Medium6.1 |
| CVE-2026-109809 | Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)SAP_SE · SAP NetWeaver Application Server Java (NWDI Cockpit) | Medium6.5 |
| CVE-2026-109808 | Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI)SAP_SE · SAP Solution Tools Plug-In (ST-PI) | Low3.1 |
| CVE-2026-109807 | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)SAP_SE · SAP NetWeaver (Internet Graphics Service) | High7.5 |
| CVE-2026-109806 | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)SAP_SE · SAP NetWeaver (Internet Graphics Service) | High7.5 |
| CVE-2026-109804 | Information Disclosure in SAP NetWeaver (SAP Message Server)SAP_SE · SAP NetWeaver (SAP Message Server) | High7.5 |
| CVE-2026-109803 | Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)SAP_SE · SAP NetWeaver Knowledge Management (XML Forms) | Critical9.9 |
| CVE-2026-109802 | Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAPSAP_SE · SAP NetWeaver Application Server for ABAP | Medium6.5 |
| CVE-2026-109801 | Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)SAP_SE · SAP NetWeaver Application Server Java (NWDI Cockpit) | Medium6.5 |
| CVE-2026-109800 | Memory Corruption vulnerability in SAP Web DispatcherSAP_SE · SAP Web Dispatcher | High7.7 |
| CVE-2026-109798 | XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE · SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | Critical9.1 |
| CVE-2026-109796 | Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE · SAP NetWeaver and ABAP Platform | Medium4.3 |
| CVE-2026-109795 | Missing authorization check in S4CRMSAP_SE · S4CRM | Critical9.9 |
| CVE-2026-109794 | Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web DispatcherSAP_SE · SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher | High7.5 |
| CVE-2026-109793 | Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web DispatcherSAP_SE · SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher | High7.5 |
| CVE-2026-89131 | Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium4.3 |
| CVE-2026-89129 | Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)SAP_SE · SAP NetWeaver AS Java (Web Services) | Medium5.8 |
| CVE-2026-89128 | Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool)SAP_SE · SAP NetWeaver AS Java (Process Integration Test Tool) | Medium5.3 |
| CVE-2026-89126 | Memory Corruption vulnerability in SAP Web DispatcherSAP_SE · SAP Web Dispatcher | Critical10.0 |
| CVE-2026-89119 | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication ManagerSAP_SE · SAP Web Dispatcher and Internet Communication Manager | Critical9.6 |
| CVE-2026-89115 | Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management ConsoleSAP_SE · SAP Start Service and SAP Microsoft Management Console | Medium4.4 |
| CVE-2026-89114 | Missing Authentication check in SAP NetWeaver AS Java EDM ApplicationSAP_SE · SAP NetWeaver AS Java EDM Application | High7.5 |
| CVE-2026-89103 | Broken Access Control in SAP GatewaySAP_SE · SAP Gateway | Critical10.0 |
| CVE-2026-76973 | Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server)SAP_SE · SAP NetWeaver and ABAP Platform (SAP Message Server) | High7.5 |
| CVE-2026-76970 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP PlatformSAP_SE · SAP NetWeaver and ABAP Platform | High7.5 |
| CVE-2026-76966 | Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE · SAP NetWeaver and ABAP Platform | High8.9 |
| CVE-2026-76965 | OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP PlatformSAP_SE · SAP NetWeaver and ABAP Platform | Critical9.9 |
| CVE-2026-76964 | Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager)SAP_SE · SAP NetWeaver AS ABAP (Internet Communication Manager) | Critical10.0 |
| CVE-2026-89124 | Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)SAP_SE · SAP HANA (Display Product Catalog Based on Customs Declaration) | Medium4.3 |
| CVE-2026-89122 | Open Redirect Vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium6.1 |
| CVE-2026-89121 | Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)SAP_SE · SAP S/4HANA (Linear Asset Management RAP Business Object) | Medium4.7 |
| CVE-2026-89120 | Missing authorization check in SAP ABAP PlatformSAP_SE · SAP ABAP Platform | High7.1 |
| CVE-2026-89118 | Information Disclosure vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium5.3 |
| CVE-2026-89117 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium6.1 |
| CVE-2026-89116 | OS Command Injection in Yeoman-UI / Application Wizard Extension for VS CodeSAP_SE · SAP yeoman-ui | Medium5.9 |
| CVE-2026-89113 | SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)SAP_SE · SAP Commerce Cloud (OOTB Code) | High8.8 |