Vendor
SAP
As of , 14 SAP vulnerabilities are on CISA's list of exploited vulnerabilities, 3 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2020-6207.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2020-6207Missing Authentication for Critical Function | SAP Solution Manager | Patch this weekMetasploit module; EPSS 0.98 | 0.98 | ||
| 2 | CVE-2020-6287Missing Authentication for Critical Function | SAP NetWeaver | Patch this weekMetasploit module; EPSS 0.95 | 0.95 | ||
| 3 | CVE-2025-31324Unrestricted File Upload | SAP NetWeaver | Patch this weekRansomware use; EPSS 0.99 | 0.99 | ||
| 4 | CVE-2017-12637Directory Traversal | SAP NetWeaver | Patch this weekEPSS 0.95 | 0.95 | ||
| 5 | CVE-2022-22536HTTP Request Smuggling | SAP Multiple Products | Patch this weekEPSS 0.98 | 0.98 | ||
| 6 | CVE-2016-2386SQL Injection | SAP NetWeaver | Patch this weekEPSS 0.72 | 0.72 | ||
| 7 | CVE-2016-2388Information Disclosure | SAP NetWeaver | Patch this weekEPSS 0.52 | 0.52 | ||
| 8 | CVE-2018-2380Path Traversal | SAP Customer Relationship Management (CRM) | Patch this weekRansomware use | 0.29 | ||
| 9 | CVE-2025-42999Deserialization | SAP NetWeaver | Patch this weekRansomware use | 0.14 | ||
| 10 | CVE-2021-38163Unrestricted File Upload | SAP NetWeaver | Patch soon | 0.37 | ||
| 11 | CVE-2016-3976Directory Traversal | SAP NetWeaver | Patch soon | 0.47 | ||
| 12 | CVE-2010-5326Remote Code Execution | SAP NetWeaver | Patch soon | 0.18 | ||
| 13 | CVE-2016-9563XML External Entity (XXE) | SAP NetWeaver | Patch soon | 0.24 | ||
| 14 | CVE-2019-0344Deserialization of Untrusted Data | SAP Commerce Cloud | Patch soon | 0.07 |
Products
- NetWeaver10 entries
- Commerce Cloud1 entry
- Customer Relationship Management (CRM)1 entry
- Multiple Products1 entry
- Solution Manager1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 6 |
| 2022 | 4 |
| 2023 | none |
| 2024 | 1 |
| 2025 | 3 |
| 2026 | none |