Vendor
sap se
On CISA KEV8Public exploit23Avg CVSS6.1
CVEs in the catalog
1,401
since 2018-01
Months in the top 100
93
months with a stored rank
Best rank
#3
one month recomputed
History
CVEs per ranked month
Last 24 of 93 ranked months. 0.6% of its CVEs are on the CISA KEV catalog.
Sep 24Sep 26
| Month | CVEs | Critical | KEV | Rank |
|---|---|---|---|---|
| Sep 26 | 17 | 4 | #36 | |
| Aug 26 | 35 | 3 | #24 | |
| Jul 26 | 16 | 3 | #65* | |
| Jun 26 | 12 | 3 | #85* | |
| May 26 | 16 | 2 | #47* | |
| Apr 26 | 17 | 1 | #43* | |
| Mar 26 | 13 | 1 | #58* | |
| Feb 26 | 27 | 2 | #24* | |
| Jan 26 | 20 | 4 | #22* | |
| Dec 25 | 12 | 2 | #42* | |
| Nov 25 | 18 | 2 | #21* | |
| Oct 25 | 9 | 2 | #59* | |
| Sep 25 | 21 | 3 | #25* | |
| Aug 25 | 16 | 2 | #29* | |
| Jul 25 | 29 | 5 | #17* | |
| Jun 25 | 16 | 1 | #25* | |
| May 25 | 20 | 2 | 1 | #23* |
| Apr 25 | 20 | 4 | 1 | #21* |
| Mar 25 | 20 | #22* | ||
| Feb 25 | 17 | #20* | ||
| Jan 25 | 14 | 2 | #23* | |
| Dec 24 | 11 | 1 | #30* | |
| Nov 24 | 8 | #71* | ||
| Sep 24 | 20 | #20* |
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| sap 3d visual enterprise viewer | 127 | 9% |
| sap businessobjects business intelligence platform | 31 | 2% |
| sap 3d visual enterprise author | 27 | 2% |
| sap business one | 20 | 1% |
| sap netweaver application server for abap and abap platform | 18 | 1% |
| sap netweaver enterprise portal | 17 | 1% |
| sap enable now | 16 | 1% |
| sap netweaver as abap and abap platform | 16 | 1% |
| sap business objects business intelligence platform | 15 | 1% |
| sap commerce | 14 | 1.0% |
| sap disclosure management | 14 | 1.0% |
| sap netweaver application server abap | 14 | 1.0% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-862 | 159 | 11% |
| CWE-79 | 126 | 9% |
| CWE-787 | 53 | 4% |
| CWE-119 | 44 | 3% |
| CWE-94 | 31 | 2% |
| CWE-200 | 23 | 2% |
| CWE-20 | 22 | 2% |
| CWE-601 | 22 | 2% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | CVSS | Published |
|---|---|---|---|
| CVE-2026-76977 | CWE-1289 | 4.3 | 2026-09-08 |
| CVE-2026-76971 | CWE-918 | 6.5 | 2026-09-08 |
| CVE-2026-76969 | CWE-522 | 9.4 | 2026-09-08 |
| CVE-2026-76968 | CWE-497 | 6.5 | 2026-09-08 |
| CVE-2026-76967 | CWE-502 | 7.8 | 2026-09-08 |
| CVE-2026-76963 | CWE-862 | 4.3 | 2026-09-08 |
| CVE-2026-76962 | CWE-862 | 4.3 | 2026-09-08 |
| CVE-2026-76961 | CWE-352 | 3.5 | 2026-09-08 |
| CVE-2026-76960 | CWE-352 | 3.5 | 2026-09-08 |
| CVE-2026-76959 | CWE-352 | 4.6 | 2026-09-08 |
| CVE-2026-76958 | CWE-611 | 8.5 | 2026-09-08 |
| CVE-2026-66768 | CWE-807 | 9 | 2026-09-08 |
| CVE-2026-66767 | CWE-191 | 7.7 | 2026-09-08 |
| CVE-2026-58240 | CWE-308 | 9.8 | 2026-09-08 |
| CVE-2026-58234 | CWE-776 | 2.2 | 2026-09-08 |