1,898 CVEs
14 in CISA KEV
SAP Vulnerabilities
CVE security advisories and vulnerability history for SAP.
1,898
Total CVEs
Published
14
In CISA KEV
Exploited in the wild
202
Public exploits
PoC or exploit code
6.5
Avg CVSS
2002–2026
Overview
SAP has 1,898 published CVE records since 2002, of which 14 are in CISA's Known Exploited Vulnerabilities catalog and 202 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting SAP products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.