HackZoneLabs News
Newsletter

SAP

14 vulnerabilities in SAP products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2025-42999SAPNetWeaverSAP NetWeaver Deserialization Vulnerability15 May 20255 Jun 2025Known
CVE-2025-31324SAPNetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability29 Apr 202520 May 2025Known
CVE-2017-12637SAPNetWeaverSAP NetWeaver Directory Traversal Vulnerability19 Mar 20259 Apr 2025Unknown
CVE-2019-0344SAPCommerce CloudSAP Commerce Cloud Deserialization of Untrusted Data Vulnerability30 Sep 202421 Oct 2024Unknown
CVE-2022-22536SAPMultiple ProductsSAP Multiple Products HTTP Request Smuggling Vulnerability18 Aug 20228 Sep 2022Unknown
CVE-2016-2386SAPNetWeaverSAP NetWeaver SQL Injection Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2016-2388SAPNetWeaverSAP NetWeaver Information Disclosure Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2021-38163SAPNetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability9 Jun 202230 Jun 2022Unknown
CVE-2010-5326SAPNetWeaverSAP NetWeaver Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2016-3976SAPNetWeaverSAP NetWeaver Directory Traversal Vulnerability3 Nov 20213 May 2022Unknown
CVE-2016-9563SAPNetWeaverSAP NetWeaver XML External Entity (XXE) Vulnerability3 Nov 20213 May 2022Unknown
CVE-2018-2380SAPCustomer Relationship Management (CRM)SAP Customer Relationship Management (CRM) Path Traversal Vulnerability3 Nov 20213 May 2022Known
CVE-2020-6207SAPSolution ManagerSAP Solution Manager Missing Authentication for Critical Function Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-6287SAPNetWeaverSAP NetWeaver Missing Authentication for Critical Function Vulnerability3 Nov 20213 May 2022Unknown