Advisories · Technology

SAP_SE SAP S/4HANA.

Every CVE that names SAP_SE SAP S/4HANA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44744 CVE record

CVSS 6.5 Medium

SQL Injection vulnerability in SAP S/4HANA
- SAP_SE SAP S/4HANA
- SQL injection
Not analysed yet 9 Jun 2026
CVE-2022-32248 CVE record

Improper input validation in SAP SE SAP S/4HANA
- SAP SE SAP S/4HANA
- CWE-20
Not analysed yet 12 Jul 2022
CVE-2022-31597 CVE record

Missing authorization in SAP SE SAP S/4HANA
- SAP SE SAP S/4HANA
- Broken access control
Not analysed yet 12 Jul 2022
CVE-2022-22531 CVE record

SAP SE SAP S/4HANA: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103…
- SAP SE SAP S/4HANA
Not analysed yet 14 Jan 2022
CVE-2022-22530 CVE record

SAP SE SAP S/4HANA: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103…
- SAP SE SAP S/4HANA
Not analysed yet 14 Jan 2022
CVE-2021-33701 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SQL injection in SAP SE DMIS Mobile Plug-In and others
- SAP SE DMIS Mobile Plug-In
- SAP SE SAP S/4HANA
- SQL injection
Not analysed yet 15 Sept 2021
CVE-2021-38176 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject AB…
- SAP SE SAP S/4HANA
- SAP SE SAP LT Replication Server
Not analysed yet 14 Sept 2021