Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,525All CVEsplus 18,890 rejected
- 426Last 24 hours3,033 in the last 7 days
- 17,435Last 30 days1,599 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 159 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 159 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 159 |
| 2023 | 13 | 7 | 42 | 4 | 0 | 66 | 159 |
| 2022 | 3 | 3 | 7 | 0 | 0 | 13 | 93 |
| 2021 | 0 | 0 | 2 | 0 | 0 | 2 | 80 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 78 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 78 |
| 2018 | 2 | 33 | 30 | 1 | 0 | 66 | 78 |
| 2017 | 1 | 4 | 7 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2023-29189 | HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)SAP · CRM (WebClient UI) | Medium5.4 |
| CVE-2023-29187 | DLL Hijacking vulnerability in SapSetup (Software Installation Program)SAP · SapSetup (Software Installation Program) | Medium6.7 |
| CVE-2023-29186 | Directory/Path Traversal vulnerability in SAP NetWeaver.SAP · NetWeaver (BI CONT ADDON) | High8.7 |
| CVE-2023-29185 | Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)SAP · NetWeaver AS for ABAP (Business Server Pages) | Medium5.3 |
| CVE-2023-29112 | Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)SAP · Application Interface Framework (Message Monitoring) | Low3.7 |
| CVE-2023-29111 | Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)SAP · Application Interface Framework (ODATA service) | Low3.1 |
| CVE-2023-29110 | Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)SAP · Application Interface Framework (Message Dashboard) | Low3.7 |
| CVE-2023-29109 | Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)SAP · Application Interface Framework (Message Dashboard) | Medium4.4 |
| CVE-2023-29108 | IP filter vulnerability in ABAP Platform and SAP Web DispatcherSAP · ABAP Platform and SAP Web Dispatcher | Medium5.0 |
| CVE-2023-28765 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )SAP · BusinessObjects Business Intelligence Platform (Promotion Management) | Critical9.8 |
| CVE-2023-28763 | Denial of Service in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver AS for ABAP and ABAP Platform | Medium6.5 |
| CVE-2023-28761 | Missing Authentication check in SAP NetWeaver Enterprise PortalSAP · NetWeaver Enterprise Portal | Medium6.5 |
| CVE-2023-27897 | Code Injection vulnerability in SAP CRMSAP · CRM | Medium6.0 |
| CVE-2023-27497 | Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)SAP · Diagnostics Agent (EventLogServiceCollector) | Critical10.0 |
| CVE-2023-27267 | Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)SAP · Diagnostics Agent (OSCommand Bridge) | Critical9.0 |
| CVE-2023-26458 | Information Disclosure vulnerability in SAP Landscape ManagementSAP · Landscape Management | Medium6.8 |
| CVE-2023-24527 | Improper Access Control in SAP NetWeaver AS Java for Deploy ServiceSAP · NetWeaver AS Java for Deploy Service | Medium5.3 |
| CVE-2023-1903 | Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)SAP · HCM Fiori App My Forms (Fiori 2.0) | Medium4.3 |
| CVE-2023-27895 | Information Disclosure vulnerability in SAP Authenticator for AndroidSAP · Authenticator for Android | Medium6.1 |
| CVE-2023-27893 | Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)SAP · Solution Manager and ABAP managed systems | High8.8 |
| CVE-2023-27501 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver AS for ABAP and ABAP Platform | High8.7 |
| CVE-2023-27500 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver AS for ABAP and ABAP Platform (SAPRSBRO Program) | Critical9.6 |
| CVE-2023-27498 | Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)SAP · Host Agent (SAPOSCOL) | High7.2 |
| CVE-2023-27894 | Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platformSAP · BusinessObjects Business Intelligence Platform (Web Services) | Medium5.0 |
| CVE-2023-27896 | Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platformSAP · BusinessObjects Business Intelligence Platform (Web Services) | Medium6.5 |
| CVE-2023-27271 | Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platformSAP · BusinessObjects Business Intelligence Platform (Web Services) | Medium6.5 |
| CVE-2023-27270 | Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver Application Server for ABAP and ABAP Platform | Medium6.5 |
| CVE-2023-27269 | Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver Application Server for ABAP and ABAP Platform | Critical9.6 |
| CVE-2023-27268 | Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)SAP · NetWeaver AS Java (Object Analyzing Service) | Medium5.3 |
| CVE-2023-26461 | XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)SAP · NetWeaver (SAP Enterprise Portal) | Medium6.8 |
| CVE-2023-26460 | Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)SAP · NetWeaver AS for Java | Medium5.3 |
| CVE-2023-26457 | Cross-Site Scripting (XSS) vulnerability in SAP Content ServerSAP · Content Server | Medium6.1 |
| CVE-2023-25618 | Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver AS for ABAP and ABAP Platform | Medium6.5 |
| CVE-2023-26459 | Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP · NetWeaver AS for ABAP and ABAP Platform | High7.4 |
| CVE-2023-25617 | OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)SAP · Business Objects (Adaptive Job Server) | Critical9.0 |
| CVE-2023-25616 | Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)SAP · Business Objects Business Intelligence Platform (CMC) | Critical9.9 |
| CVE-2023-25615 | SQL Injection vulnerability in SAP ABAP PlatformSAP · ABAP Platform | Medium6.8 |
| CVE-2023-24526 | Improper Access Control in SAP NetWeaver AS Java (Classload Service)SAP · NetWeaver AS Java for Classload Service | Medium5.3 |
| CVE-2023-23857 | Improper Access Control in SAP NetWeaver AS for JavaSAP · NetWeaver AS for Java | Critical9.9 |
| CVE-2023-25614 | SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker…SAP · NetWeaver AS ABAP (BSP Framework) | Medium6.1 |
| CVE-2023-24530 | SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed…SAP · BusinessObjects Business Intelligence Platform (CMC) | High8.4 |
| CVE-2023-24529 | Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow…SAP · NetWeaver AS ABAP (Business Server Pages application) | Medium6.1 |
| CVE-2023-24528 | SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured…SAP · Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests) | Medium6.5 |
| CVE-2023-24525 | SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting…SAP · CRM (WebClient UI) | Medium4.3 |
| CVE-2023-24524 | SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of…SAP · S/4 HANA (Map Treasury Correspondence Format Data) | Medium6.5 |
| CVE-2023-24523 | An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can…SAP · Host Agent Service | High8.8 |
| CVE-2023-24522 | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to…SAP · NetWeaver AS ABAP (BSP Framework) | Medium6.1 |
| CVE-2023-24521 | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757,…SAP · NetWeaver AS ABAP (BSP Framework) | Medium6.1 |
| CVE-2023-23860 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a…SAP · NetWeaver AS for ABAP and ABAP Platform | Medium6.1 |
| CVE-2023-23859 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a…SAP · NetWeaver AS for ABAP and ABAP Platform | Medium6.1 |