CVE Tools
Track your stack

Sap

1,553 CVEs tracked since 2003. Since Oct 2020, 4 of them reached CISA KEV.

Sap CVEs per month

Oct 2020 to Apr 2026. Point at a month, or focus the strip and use the arrow keys.
Sap CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-10210
2020-11180
2020-12120
2021-01270
2021-0290
2021-03null or fewer
2021-04140
2021-0580
2021-06400
2021-07180
2021-08120
2021-09331
2021-10110
2021-1170
2021-12130
2022-0150
2022-02151
2022-03120
2022-04190
2022-0570
2022-06210
2022-07210
2022-08null or fewer
2022-0980
2022-10550
2022-11110
2022-12130
2023-0190
2023-02220
2023-03null or fewer
2023-04190
2023-05140
2023-0670
2023-07180
2023-08160
2023-09140
2023-1070
2023-11null or fewer
2023-12160
2024-0170
2024-02130
2024-0370
2024-0460
2024-05null or fewer
2024-06100
2024-07170
2024-08170
2024-0990
2024-1050
2024-1170
2024-12110
2025-01140
2025-0250
2025-03170
2025-04201
2025-0561
2025-06160
2025-07290
2025-08150
2025-09140
2025-10null or fewer
2025-11180
2025-12120
2026-01140
2026-02270
2026-03null or fewer
2026-04100

Products

The products that kept showing up in Sap's monthly top three, with their CVEs summed over those months.

  1. 3d Visual Enterprise Viewer698 months
  2. Netweaver Application Server Abap3110 months
  3. 3d Visual Enterprise Author261 month
  4. Netweaver Application Server Java187 months
  5. Sap Netweaver166 months
  6. Business One144 months
  7. Businessobjects Business Intelligence136 months
  8. Businessobjects Business Intelligence Platform135 months
  9. Sap Business Objects Business Intelligence Platform134 months
  10. Solution Manager134 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Sap.

  1. CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter)5.3
  2. CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter)5.9
  3. CVE-2026-66776Multiple vulnerabilities in SAP Business AI Platform (Approuter)5.9
  4. CVE-2026-66775Multiple vulnerabilities in SAP Business AI Platform (Approuter)4.3
  5. CVE-2026-66774Multiple vulnerabilities in SAP Business AI Platform (Approuter)3.7
  6. CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter)4.3
  7. CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter)6.4
  8. CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter)3.7
  9. CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter)5.9
  10. CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter)5.9
  11. CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter)7.0
  12. CVE-2026-44745Open Redirect vulnerability in SAP Approuter8.1
  13. CVE-2026-27690HTTP Request Smuggling in SAP Approuter9.1
  14. CVE-2026-44748XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform9.9
  15. CVE-2026-40128Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)9.0

The record

Peak rank
#1 in Nov 2003
Busiest month shown
Oct 2022, 55 CVEs
Months with a KEV entry
4 since Oct 2020
Monthly snapshots
152 since 2003
Sap's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store