SAP_SE SAP Extended Passport (EPP) Processing

Name: SAP_SE SAP Extended Passport (EPP) Processing
Brand: SAP_SE

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical2high3medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2332US	critical9.1	1.31% (70th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-44756US	critical10.0	1.40% (72nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-66768US	critical9.0	0.61% (49th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-58240US	critical9.8	0.53% (45th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76969US	critical9.4	0.44% (38th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-58243US	—OT elevated	0.44% (38th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-76968US	medium6.5	0.39% (33rd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-44766US	medium6.5	0.39% (32nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76958US	high8.5	0.38% (32nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76967US	high7.8	0.36% (30th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76971US	medium6.5	0.25% (16th)	—	no fix	2026-09-08	≤ vers:unknown/*

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-308Use of Single-factor Authentication1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-807Reliance on Untrusted Inputs in a Security Decision1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.