CVE-2026-27687

Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal

Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This vulnerability has a high impact on confidentiality and does not affect integrity and availability.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Erp Hcm Portugal Sap S/4hana Hcm Portugal

CVE-2026-27685

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver Enterprise Portal Administration

CVE-2024-28167

Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization causing high impact on Integrity of the appliction.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Group Reporting Data Collection

CVE-2025-42907

Server-Side Request Forgery in SAP BI Platform

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Businessobjects Bi Platform Sap Business Objects Business Intgelligence Platform

CVE-2025-42873

Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)

SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system unresponsiveness due to a blocked processing thread. This vulnerability has no impact on confidentiality or integrity but has a high impact on system availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Sapui5 Sapui5

CVE-2024-47593

Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sap Netweaver And Abap Platform

CVE-2024-33007

Client-side script execution vulnerability in SAP UI5(PDFViewer)

PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript (or any harmful client-side script), the PDFViewer will execute the JavaScript embedded in the PDF which can cause a potential security threat.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Sap Se

Products

Sapui5

CVE-2024-22128

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Business Client for HTML

SAP NWBC for HTML - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious javascript to cause limited impact to confidentiality and integrity of the application data after successful exploitation.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Netweaver Business Client For Html Sap Netweaver Business Client For Html

CVE-2025-0061

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Businessobjects Business Intelligence Platform Sap Business Objects Business Intgelligence Platform

CVE-2024-33004

Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)

SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Businessobjects Business Intelligence Platform Sap Business Objects Business Intgelligence Platform

CVE-2024-39592

[CVE-2024-39592] Missing Authorization check in SAP PDCE

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

S4core S4coreop Sap Pdce

CVE-2024-45277

Prototype Pollution vulnerability in SAP HANA Client

The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact on the availability of the application. This has no impact on Confidentiality and Integrity.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Hana-client Sap Hana Client

CVE-2024-45278

Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice

SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Commerce Backoffice Sap Commerce Backoffice

CVE-2024-42374

XML injection in SAP BEx Web Java Runtime Export Web Service

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering (PDF creation) unavailable. This affects the confidentiality and availability of the application.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Sap Sap Se

Products

Bex Web Java Runtime Export Web Service Bex Web Java Runtime Export Web Service