SAP_SE vulnerabilities

644 published CVEs name SAP_SE among the affected products; CISA lists 2 of them as exploited in the wild.

Critical 67High 113Medium 410Low 54Not scored 0

CVEs per yearBy the year they were published

CVE-2025-42999
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
SAP_SE · SAP NetWeaver (Visual Composer development server)
ExploitedCritical9.1
CVE-2025-31324
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
SAP_SE · SAP NetWeaver (Visual Composer development server)
ExploitedCritical10.0

CVE-2026-89124
Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)
SAP_SE · SAP HANA (Display Product Catalog Based on Customs Declaration)
Medium4.3
CVE-2026-89122
Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
SAP_SE · SAP NetWeaver Enterprise Portal
Medium6.1
CVE-2026-89121
Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)
SAP_SE · SAP S/4HANA (Linear Asset Management RAP Business Object)
Medium4.7
CVE-2026-89120
Missing authorization check in SAP ABAP Platform
SAP_SE · SAP ABAP Platform
High7.1
CVE-2026-89118
Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
SAP_SE · SAP NetWeaver Enterprise Portal
Medium5.3
CVE-2026-89117
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
SAP_SE · SAP NetWeaver Enterprise Portal
Medium6.1
CVE-2026-89116
OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code
SAP_SE · SAP yeoman-ui
Medium5.9
CVE-2026-89113
SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
SAP_SE · SAP Commerce Cloud (OOTB Code)
High8.8
CVE-2026-89112
Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure
SAP_SE · CLA-Assistant
Medium6.5
CVE-2026-89111
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
SAP_SE · SAP Cloud
Critical10.0