CVE Tools
Track your stack

Sap

1,553 CVEs across 152 months on the top 200 list since May 2003. Peak rank #1 in Nov 2003. 12 of them are now in CISA KEV.

Sap CVEs per month since May 2003

May 2021 to Apr 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 55, Oct 2022
May 2021: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #66 · mostly Netweaver Process Integration, Business One, Business-one-hana-chef-cookbookJun 2021: 40 CVEs · 1 critical · 0 now in CISA KEV · rank #19 · mostly 3d Visual Enterprise Viewer, Netweaver As Internet Graphics Server, Netweaver As AbapJul 2021: 18 CVEs · 0 critical · 0 now in CISA KEV · rank #31 · mostly Sap Netweaver Portal, Netweaver Application Server Abap, Netweaver Application Server JavaAug 2021: 12 CVEs · 1 critical · 0 now in CISA KEV · rank #58 · mostly J2EE Engine, Businessobjects Edge, Netweaver Enterprise PortalSep 2021: 33 CVEs · 6 critical · 1 now in CISA KEV · rank #20 · mostly Business One, Contact Center, Cloud ConnectorOct 2021: 11 CVEs · 2 critical · 0 now in CISA KEV · rank #53 · mostly Netweaver Application Server Abap, Netweaver Abap, Business OneNov 2021: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #74 · mostly Erp Human Capital Management, Gui For Windows, Abap Platform KernelDec 2021: 13 CVEs · 3 critical · 0 now in CISA KEV · rank #47 · mostly 3d Visual Enterprise Viewer, Netweaver Application Server Abap, Businessobjects Business Intelligence PlatformJan 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #115 · mostly S\/4hana, Enterprise Threat Detection, Netweaver AbapFeb 2022: 15 CVEs · 3 critical · 1 now in CISA KEV · rank #48 · mostly 3d Visual Enterprise Viewer, Netweaver Application Server Java, Netweaver AbapMar 2022: 12 CVEs · 1 critical · 0 now in CISA KEV · rank #55 · mostly Netweaver Enterprise Portal, Simple Diagnostics Agent, Focused RunApr 2022: 19 CVEs · 0 critical · 0 now in CISA KEV · rank #34 · mostly 3d Visual Enterprise Viewer, Businessobjects Business Intelligence Platform, NetweaverMay 2022: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #89 · mostly Netweaver Application Server Abap, Netweaver As Abap Kernel, Netweaver As Abap KRNL64UCJun 2022: 21 CVEs · 1 critical · 0 now in CISA KEV · rank #31 · mostly 3d Visual Enterprise Viewer, Adaptive Server Enterprise, Netweaver AbapJul 2022: 21 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly Sap Business Objects Business Intelligence Platform, Netweaver Enterprise Portal, Business OneAug 2022: not on the top 200 that monthSep 2022: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #71 · mostly Netweaver Application Server Abap, Businessobjects Business Intelligence, Access ControlOct 2022: 55 CVEs · 1 critical · 0 now in CISA KEV · rank #11 · mostly 3d Visual Enterprise Author, 3d Visual Enterprise Viewer, Businessobjects Business IntelligenceNov 2022: 11 CVEs · 0 critical · 0 now in CISA KEV · rank #74 · mostly Financial Consolidation, Netweaver Application Server Abap, Sap SQL AnywhereDec 2022: 13 CVEs · 3 critical · 0 now in CISA KEV · rank #52 · mostly Business Objects Business Intelligence Platform, Solution Manager, Netweaver Process IntegrationJan 2023: 9 CVEs · 5 critical · 0 now in CISA KEV · rank #66 · mostly Businessobjects Business Intelligence Platform, Netweaver Application Server Abap, Businessobjects Business Intelligence Platform (Central Management Console)Feb 2023: 22 CVEs · 0 critical · 0 now in CISA KEV · rank #38 · mostly Netweaver Application Server Abap, Solution Manager, Netweaver As Abap (Bsp Framework)Mar 2023: not on the top 200 that monthApr 2023: 19 CVEs · 3 critical · 0 now in CISA KEV · rank #45 · mostly Application Interface Framework, S4CORE, Application Interface Framework (Message Dashboard)May 2023: 14 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Businessobjects Business Intelligence, Customer Relationship Management Webclient Ui, Customer Relationship Management S4FNDJun 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #94 · mostly Netweaver, Sap Netweaver, Digital ManufacturingJul 2023: 18 CVEs · 1 critical · 0 now in CISA KEV · rank #46 · mostly Enable Now, Sap Enable Now, Sap Netweaver Process IntegrationAug 2023: 16 CVEs · 1 critical · 0 now in CISA KEV · rank #58 · mostly Powerdesigner, Sap Business One, Sap PowerdesignerSep 2023: 14 CVEs · 2 critical · 0 now in CISA KEV · rank #55 · mostly Netweaver Application Server Abap, Businessobjects Business Intelligence, Hana DatabaseOct 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #111 · mostly Sap S/4 Hana, S\/4hana, Enable Now Enable Now Consump DelNov 2023: not on the top 200 that monthDec 2023: 16 CVEs · 4 critical · 0 now in CISA KEV · rank #51 · mostly Biller Direct, Business Objects Business Intelligence Platform, Businessobjects Web IntelligenceJan 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #110 · mostly Sap Web Dispatcher, Application Interface Framework, Gui ConnectorFeb 2024: 13 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Crm - Webclient Ui, Sap Crm Webclient Ui, Netweaver Application Server JavaMar 2024: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #116 · mostly Abap Platform, Fiori Front End Server, NetweaverApr 2024: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #148 · mostly Businessobjects Web Intelligence, Netweaver, Sap Abap PlatformMay 2024: not on the top 200 that monthJun 2024: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #72 · mostly Netweaver Application Server Java, Bw\/4hana, Customer Relationship Management Webclient UiJul 2024: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly Customer Relationship Management Webclient Ui, Customer Relationship Management S4FND, Sap BasisAug 2024: 17 CVEs · 1 critical · 0 now in CISA KEV · rank #50 · mostly Sap Business Objects Business Intelligence Platform, Business Objects Business Intelligence Platform, Sap Netweaver As AbapSep 2024: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #74 · mostly Sap Abap Platform, Sap Netweaver Application Server, Sap Business WarehouseOct 2024: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #156 · mostly Hana-client, Businessobjects Business Intelligence, Commerce BackofficeNov 2024: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #135 · mostly Sap Netweaver Java Application Server, Sap Netweaver As Abap, Host AgentDec 2024: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #60 · mostly Sap Netweaver As Java, Sap Human Capital Management (Hcm), Sap Netweaver AdministratorJan 2025: 14 CVEs · 2 critical · 0 now in CISA KEV · rank #54 · mostly Sap Basis, Sap Netweaver Application Server For Abap and Abap Platform, Sap Netweaver Application ServerFeb 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #147 · mostly Businessobjects Business Intelligence Platform, Sap Basis, Sap Business Objects Business Intelligence PlatformMar 2025: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #58 · mostly Sap Business Objects Business Intelligence Platform, Sap Netweaver Application Server, Sap S/4 HanaApr 2025: 20 CVEs · 4 critical · 1 now in CISA KEV · rank #43 · mostly Sap Netweaver, Sap S/4 Hana, Sap Commerce CloudMay 2025: 6 CVEs · 2 critical · 1 now in CISA KEV · rank #136 · mostly Supplier Relationship Management, Sap Supplier Relationship Management, Sap NetweaverJun 2025: 16 CVEs · 1 critical · 0 now in CISA KEV · rank #55 · mostly Sap S/4hana, Sap Mdm Server, Sap NetweaverJul 2025: 29 CVEs · 5 critical · 0 now in CISA KEV · rank #40 · mostly Sap Netweaver, Sap Business Warehouse, SapcarAug 2025: 15 CVEs · 2 critical · 0 now in CISA KEV · rank #61 · mostly Sap S/4hana, Sap Netweaver Application Server, Sap Netweaver Application Server Abap (Documento Bic)Sep 2025: 14 CVEs · 3 critical · 0 now in CISA KEV · rank #58 · mostly Sap Hcm, Sap Netweaver As Java, Sap NetweaverOct 2025: not on the top 200 that monthNov 2025: 18 CVEs · 2 critical · 0 now in CISA KEV · rank #46 · mostly Business Connector, Sap Business Connector (Sap Bc), Sap Netweaver Application Server For Abap and Abap PlatformDec 2025: 12 CVEs · 2 critical · 0 now in CISA KEV · rank #76 · mostly Sap Netweaver Internet Communication Manager, Sap Web Dispatcher, Sap Netweaver Enterprise PortalJan 2026: 14 CVEs · 4 critical · 0 now in CISA KEV · rank #71 · mostly Sap S/4hana, Sap Fiori App (Intercompany Balance Reconciliation), Hana DatabaseFeb 2026: 27 CVEs · 2 critical · 0 now in CISA KEV · rank #38 · mostly Businessobjects Business Intelligence Platform, S4CORE, Solution Tools Plug-inMar 2026: not on the top 200 that monthApr 2026: 10 CVEs · 1 critical · 0 now in CISA KEV · rank #110 · mostly Sap Netweaver Java Application Server, Sap S/4hana, Sap Human Capital Management (Hcm)

In the lens

The products that kept showing up in Sap's monthly top three from May 2021 to Apr 2026. Move the lens and the list follows.

  1. 3d Visual Enterprise Viewer476 months
  2. Netweaver Application Server Abap299 months
  3. 3d Visual Enterprise Author261 month
  4. Sap Netweaver166 months
  5. Business One144 months
  6. Businessobjects Business Intelligence Platform135 months
  7. Sap Business Objects Business Intelligence Platform134 months
  8. Businessobjects Business Intelligence125 months
  9. Sap S/4hana114 months
  10. Sap Netweaver Application Server104 months

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#1 in Nov 2003
Busiest month
Oct 2022, 55 CVEs
Months with a KEV entry
11 of 152 on the list
On the top 200 list
152 of 276 monthly snapshots

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store