S
Vendor security profile2 actively exploited CVEs
SAP_SE
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs60
Critical10
CISA KEV2
Public exploit3
Patch rate%0
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
35
2
20
CVE KEV
CVE severity distribution
60toplam CVE
Critical10 (17%)
High10 (17%)
Medium35 (58%)
Low5 (8%)
Patch and exploitation view
%0
Verified patch
%3
CISA KEV
%5
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
59Unknown
Latest vulnerabilities
4.3
CVE-2026-89124
Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)
S
Patch status unknownEPSS %0
6.1
CVE-2026-89122
Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
4.7
CVE-2026-89121
Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)
S
Patch status unknownEPSS %0
7.1
CVE-2026-89120
Missing authorization check in SAP ABAP Platform
S
Patch status unknownEPSS %0
5.3
CVE-2026-89118
Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
6.1
CVE-2026-89117
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
S
Patch status unknownEPSS %0
5.9
CVE-2026-89116
OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code
S
Patch status unknownEPSS %0
8.8
CVE-2026-89113
SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
S
Patch status unknownEPSS %0
6.5
CVE-2026-89112
Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure
S
Patch status unknownEPSS %0
10.0
CVE-2026-89111
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
S
Patch status unknownEPSS %0