CVE Tools

Sap Host Agent

9 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Sap Host Agent, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Sap Host Agent CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Sap Host Agent CVEs per month
MonthCVEs
2024-100
2024-111
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 9 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical111%
  • High444%
  • Medium333%
  • Low111%

Latest CVEs

The 9 most recently published vulnerabilities affecting Sap Host Agent.

  1. CVE-2024-47595Local Privilege Escalation in SAP Host Agent6.3
  2. CVE-2023-40309Missing Authorization check in SAP CommonCryptoLib9.8
  3. CVE-2023-40308Memory Corruption vulnerability in SAP CommonCryptoLib7.5
  4. CVE-2023-36926Information disclosure vulnerability in SAP Host Agent3.7
  5. CVE-2022-29616SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.7.5
  6. CVE-2022-28774Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.5.5
  7. CVE-2020-6234SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.7.2
  8. CVE-2020-6186SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host Agent, leading to Denial of Service.7.5
  9. CVE-2020-6183SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sending request to the main SAPOSCOL process and receive responses that may cont...6.5

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store