Security Digest
SAP: known exploited vulnerabilities
4 SAP CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-05-15 | CVE-2025-42999 | SAP NetWeaver SAP NetWeaver Deserialization Vulnerability Ransomware | 2025-06-05 |
| 2025-04-29 | CVE-2025-31324 | SAP NetWeaver SAP NetWeaver Unrestricted File Upload Vulnerability Ransomware | 2025-05-20 |
| 2025-03-19 | CVE-2017-12637 | SAP NetWeaver SAP NetWeaver Directory Traversal Vulnerability | 2025-04-09 |
| 2024-09-30 | CVE-2019-0344 | SAP Commerce Cloud SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 2024-10-21 |