https://exploit-radar.com/en/flux/marques/sap.xml Exploit Radar: exploited SAP vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for SAP products. 2025-05-15T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-42999/ CVE-2025-42999 — SAP NetWeaver 2025-05-15T00:00:00Z Apply the patches or mitigations from SAP; if none are available, stop using the product. For cloud services, follow the guidance from SAP. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 15, 2025. https://exploit-radar.com/en/cve/CVE-2025-31324/ CVE-2025-31324 — SAP NetWeaver 2025-04-29T00:00:00Z Apply the patches or mitigations from SAP; if none are available, stop using the product. For cloud services, follow the guidance from SAP. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 29, 2025. https://exploit-radar.com/en/cve/CVE-2017-12637/ CVE-2017-12637 — SAP NetWeaver 2025-03-19T00:00:00Z Apply the patches or mitigations from SAP; if none are available, stop using the product. For cloud services, follow the guidance from SAP. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 19, 2025. https://exploit-radar.com/en/cve/CVE-2019-0344/ CVE-2019-0344 — SAP Commerce Cloud (Hybris) 2024-09-30T00:00:00Z Apply the patches or mitigations from SAP; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2024. https://exploit-radar.com/en/cve/CVE-2022-22536/ CVE-2022-22536 — SAP NetWeaver 2022-08-18T00:00:00Z Apply the security update from SAP. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2022. https://exploit-radar.com/en/cve/CVE-2016-2386/ CVE-2016-2386 — SAP NetWeaver 2022-06-09T00:00:00Z Apply the security update from SAP. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2022. https://exploit-radar.com/en/cve/CVE-2021-38163/ CVE-2021-38163 — SAP NetWeaver 2022-06-09T00:00:00Z Apply the security update from SAP. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2022. https://exploit-radar.com/en/cve/CVE-2016-2388/ CVE-2016-2388 — SAP NetWeaver 2022-06-09T00:00:00Z Apply the security update from SAP. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2022. https://exploit-radar.com/en/cve/CVE-2010-5326/ CVE-2010-5326 — SAP NetWeaver 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-6287/ CVE-2020-6287 — SAP NetWeaver 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-6207/ CVE-2020-6207 — SAP Solution Manager 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2016-3976/ CVE-2016-3976 — SAP NetWeaver 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2018-2380/ CVE-2018-2380 — SAP CRM 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2016-9563/ CVE-2016-9563 — SAP NetWeaver 2021-11-03T00:00:00Z Apply the security update from SAP. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.