SAP
CISA 가 실제 악용을 확인해 등재한 SAP 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 랜섬웨어 캠페인에 사용됨CVE-2025-42999SAP NetWeaver Deserialization Vulnerability13.9%심각9.1● 랜섬웨어 캠페인에 사용됨CVE-2025-31324SAP NetWeaver Unrestricted File Upload Vulnerability99.5%심각9.8● 실제 악용이 확인됨CVE-2017-12637SAP NetWeaver Directory Traversal Vulnerability95.1%높음7.5● 실제 악용이 확인됨CVE-2019-0344SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability7.1%심각9.8● 실제 악용이 확인됨CVE-2022-22536SAP Multiple Products HTTP Request Smuggling Vulnerability97.9%심각10.0● 실제 악용이 확인됨CVE-2016-2388SAP NetWeaver Information Disclosure Vulnerability52.2%보통5.3● 실제 악용이 확인됨CVE-2021-38163SAP NetWeaver Unrestricted File Upload Vulnerability36.0%높음8.8● 실제 악용이 확인됨CVE-2016-2386SAP NetWeaver SQL Injection Vulnerability71.5%심각9.8
등재된 제품
5종
NetWeaver 10Commerce Cloud 1Multiple Products 1Solution Manager 1Customer Relationship Management (CRM) 1
전체 목록
SAP · 14건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2025-42999 랜섬웨어 악용 | 2025-05-15 | NetWeaver | SAP NetWeaver Deserialization Vulnerability | 13.9% | 심각9.1 | 2025-06-05 |
| CVE-2025-31324 랜섬웨어 악용 | 2025-04-29 | NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | 99.5% | 심각9.8 | 2025-05-20 |
| CVE-2017-12637 | 2025-03-19 | NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | 95.1% | 높음7.5 | 2025-04-09 |
| CVE-2019-0344 | 2024-09-30 | Commerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 7.1% | 심각9.8 | 2024-10-21 |
| CVE-2022-22536 | 2022-08-18 | Multiple Products | SAP Multiple Products HTTP Request Smuggling Vulnerability | 97.9% | 심각10.0 | 2022-09-08 |
| CVE-2016-2388 | 2022-06-09 | NetWeaver | SAP NetWeaver Information Disclosure Vulnerability | 52.2% | 보통5.3 | 2022-06-30 |
| CVE-2021-38163 | 2022-06-09 | NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | 36.0% | 높음8.8 | 2022-06-30 |
| CVE-2016-2386 | 2022-06-09 | NetWeaver | SAP NetWeaver SQL Injection Vulnerability | 71.5% | 심각9.8 | 2022-06-30 |
| CVE-2020-6287 | 2021-11-03 | NetWeaver | SAP NetWeaver Missing Authentication for Critical Function Vulnerabili… | 94.7% | 심각10.0 | 2022-05-03 |
| CVE-2020-6207 | 2021-11-03 | Solution Manager | SAP Solution Manager Missing Authentication for Critical Function Vuln… | 98.1% | 심각9.8 | 2022-05-03 |
| CVE-2016-3976 | 2021-11-03 | NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | 47.3% | 높음7.5 | 2022-05-03 |
| CVE-2018-2380 랜섬웨어 악용 | 2021-11-03 | Customer Relationship Management (CRM) | SAP Customer Relationship Management (CRM) Path Traversal Vulnerabilit… | 28.9% | 보통6.6 | 2022-05-03 |
| CVE-2010-5326 | 2021-11-03 | NetWeaver | SAP NetWeaver Remote Code Execution Vulnerability | 17.8% | 심각10.0 | 2022-05-03 |
| CVE-2016-9563 | 2021-11-03 | NetWeaver | SAP NetWeaver XML External Entity (XXE) Vulnerability | 24.2% | 보통6.5 | 2022-05-03 |