Vendor intelligence profile

SAP

Current vulnerability priorities, exploitation evidence and remediation coverage for this vendor.

14CVEs tracked

14Exploited

14CISA KEV

14Guidance available

Priority vulnerabilities

Highest Signal first

88Fix now

CVE-2025-31324

NetWeaver

Confirmed exploitationView →

85Fix now

CVE-2022-22536

Content Server, Multiple Products, Netweaver Application Server Abap +1 more

Confirmed exploitationView →

85Fix now

CVE-2020-6287

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

85Fix now

CVE-2020-6207

Solution Manager

Confirmed exploitationView →

82Investigate

CVE-2017-12637

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

82Investigate

CVE-2016-2386

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

76Investigate

CVE-2021-38163

NetWeaver

Confirmed exploitationView →

76Investigate

CVE-2016-3976

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

75Investigate

CVE-2018-2380

Customer Relationship Management, Customer Relationship Management (CRM)

Confirmed exploitationView →

75Investigate

CVE-2016-2388

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

74Investigate

CVE-2025-42999

NetWeaver

Confirmed exploitationView →

73Investigate

CVE-2010-5326

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

71Investigate

CVE-2016-9563

NetWeaver, Netweaver Application Server Java

Confirmed exploitationView →

70Investigate

CVE-2019-0344

Commerce Cloud

Confirmed exploitationView →