S
Vendor security profile14 actively exploited CVEs
sap
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs27
Critical3
CISA KEV14
Public exploit14
Patch rate%0
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
2
11
0
0
CVE KEV
CVE severity distribution
27toplam CVE
Critical3 (11%)
High2 (7%)
Medium8 (30%)
Low2 (7%)
Uncertain12 (44%)
Patch and exploitation view
%0
Verified patch
%52
CISA KEV
%52
Public exploit
0Patch available
0Partial
13Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
4.3
CVE-2026-89124
Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)
S
Patch status unknownEPSS %0
6.1
CVE-2026-89122
Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
4.7
CVE-2026-89121
Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)
S
Patch status unknownEPSS %0
7.1
CVE-2026-89120
Missing authorization check in SAP ABAP Platform
S
Patch status unknownEPSS %0
5.3
CVE-2026-89118
Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
6.1
CVE-2026-89117
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
5.9
CVE-2026-89116
OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code
S
Patch status unknownEPSS %0
8.8
CVE-2026-89113
SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
S
Patch status unknownEPSS %0
6.5
CVE-2026-89112
Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure
S
Patch status unknownEPSS %0
10.0
CVE-2026-89111
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
S
Patch status unknownEPSS %0