S
Vendor security profile14 actively exploited CVEs
sap
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs27
Critical3
CISA KEV14
Public exploit14
Patch rate%0
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
2
11
0
0
CVE KEV
CVE severity distribution
27toplam CVE
Critical3 (11%)
High2 (7%)
Medium8 (30%)
Low2 (7%)
Uncertain12 (44%)
Patch and exploitation view
%0
Verified patch
%52
CISA KEV
%52
Public exploit
0Patch available
0Partial
13Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
5.3
CVE-2026-76974
Information Disclosure vulnerability in SAP Fiori Launchpad
S
Patch status unknownEPSS %0
10.0
CVE-2026-44756
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
S
Patch status unknownEPSS %1
7.5
CVE-2026-66766
Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)
S
Patch status unknownEPSS %1
10.0
CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
S
Patch status unknownEPSS %1
6.3
CVE-2026-66779
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP
S
Patch status unknownEPSS %0
5.3
CVE-2026-66778
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
S
Patch status unknownEPSS %0
5.9
CVE-2026-66777
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
S
Patch status unknownEPSS %0
5.9
CVE-2026-66776
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
S
Patch status unknownEPSS %0
4.3
CVE-2026-66775
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
S
Patch status unknownEPSS %0
3.7
CVE-2026-66774
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
S
Patch status unknownEPSS %0