Known vulnerabilities in ABAP Platform

Known vulnerabilities in ABAP Platform

Vendor: SAP

Software: ABAP Platform

Software CPE: cpe:2.3:a:sap:abap_platform:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU122527 - Out-of-bounds read CVE-2026-24320	CWE-125	Medium	No	No	-	10.02.2026	SB2026021028
#VU122526 - Improper Verification of Cryptographic Signature CVE-2026-23687	CWE-347	Medium	No	No	-	10.02.2026	SB2026021028
#VU122525 - Missing Authorization CVE-2026-0509	CWE-862	Medium	No	No	-	10.02.2026	SB2026021028
#VU113818 - Missing Authorization CVE-2025-42961	CWE-862	Low	No	No	-	12.08.2025	SB2025081229
#VU113817 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-42969	CWE-79	Low	No	No	-	12.08.2025	SB2025081229
#VU113816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-42956	CWE-79	Low	No	No	-	12.08.2025	SB2025081229
#VU113815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-42981	CWE-79	Low	No	No	-	12.08.2025	SB2025081229
#VU113814 - Improper Authentication CVE-2025-42959	CWE-287	High	No	No	-	12.08.2025	SB2025081229
#VU109020 - Exposure of sensitive information to an unauthorized actor CVE-2025-31329	CWE-200	Low	No	No	-	13.05.2025	SB2025051328
#VU101374 - Missing Authorization CVE-2024-47585	CWE-862	Low	No	No	-	10.12.2024	SB2024121007
#VU100243 - Exposure of sensitive information to an unauthorized actor CVE-2024-47593	CWE-200	Medium	No	No	-	12.11.2024	SB2024111252
#VU100242 - NULL Pointer Dereference CVE-2024-47586	CWE-476	Medium	No	No	-	12.11.2024	SB2024111252
#VU78829 - Improper Authentication CVE-2023-35874	CWE-287	Medium	No	No	-	01.08.2023	SB2023080124
#VU58014 - Improper Authorization CVE-2021-40501	CWE-285	High	No	No	-	09.11.2021	SB2021110901
#VU46640 - Improper Control of Generation of Code ('Code Injection') CVE-2020-6318	CWE-94	High	No	No	-	11.09.2020	SB2020091108
#VU46638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-6324	CWE-79	Medium	No	No	-	11.09.2020	SB2020091106
#VU17733 - Missing Authorization CVE-2019-0257	CWE-862	Low	No	No	-	18.02.2019	SB2019021223
#VU17661 - Permissions, Privileges, and Access Controls CVE-2019-0255	CWE-264	Low	No	No	-	13.02.2019	SB2019021223
#VU17659 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-0265	CWE-611	Medium	No	No	-	13.02.2019	SB2019021223