Sap Document Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Document Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-0505 — CVSS 6.1 (medium): The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This…
• CVE-2026-24323 — CVSS 6.1 (medium): The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not…