Advisories · Technology

SAP_SE SAP Fiori Launchpad.

Every CVE that names SAP_SE SAP Fiori Launchpad among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76974 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP Fiori Launchpad
- SAP_SE SAP Fiori Launchpad
- Code injection
Not analysed yet 22 Sept 2026
CVE-2026-24315 CVE record

CVSS 4.2 Medium

Path Traversal Vulnerability in SAP Fiori (launchpad)
- SAP_SE SAP Fiori (launchpad)
- Path traversal
Not analysed yet 9 Jun 2026
CVE-2025-42941 CVE record

CVSS 3.5 Low

Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
- SAP_SE SAP Fiori (Launchpad)
- CWE-1022
Not analysed yet 12 Aug 2025
CVE-2023-49584 CVE record

CVSS 4.3 Medium

Client-Side Desynchronization vulnerability in SAP Fiori Launchpad
- SAP_SE SAP Fiori Launchpad
- HTTP request smuggling
Not analysed yet 12 Dec 2023
CVE-2020-6283 CVE record

CVSS 4.8 Medium

SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, resulting in re…
- SAP SE SAP Fiori(Launchpad)
Not analysed yet 9 Sept 2020
CVE-2020-6210 CVE record

CVSS 4.7 Medium

SAP SE SAP Fiori Launchpad: SAP Fiori Launchpad, versions- 753, 754…
- SAP SE SAP Fiori Launchpad
Not analysed yet 10 Mar 2020