SAP vulnerabilities
We track 323 vulnerabilities in SAP products across 60+ products. 320 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest SAP vulnerabilities
- 8.8 High severity
BusinessObjects Business Intelligence Platform: Unrestricted Upload of File with Dangerous Type
SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the system causing a hig
- 8.8 High severity
BASIS: Improper Control of Generation of Code
Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to access a system class and execute any of its public methods wi
- 8.7 High severity
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform…
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer, Arbitrary Code Execution can be triggered when payload forces:Re-use of dangli
- 8.8 High severity
SAP BusinessObjects Business Intelligence…: Deserialization of Untrusted Data
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which
- 8.8 High severity
SAP Commerce: URL Redirection to Untrusted Site
An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows the
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered wh
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered w
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payl
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily una
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when paylo
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be tr
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes tempo
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes tempor
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered wh
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered wh
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes tem
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be trigge
- 7.8 High severity
SAP 3D Visual Enterprise Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, a Remote Code Execution can be triggered when payload f
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered whe
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can b
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be trigg
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execut
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered wh
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be trigger
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be trigg
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered wh
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be trigge
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be
- 7.8 High severity
SAP 3D Visual Enterprise Author: Improper Restriction of Operations within the Bounds of a Memory Buffer
Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can
- 7.5 High severity
SAP Manufacturing Execution: Improper Limitation of a Pathname to a Restricted Directory
SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The fil
- 7.6 High severity
SAP BusinessObjects Business Intelligence…: Exposure of Sensitive Information to an Unauthorized Actor
Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integri