Component rankings
Which SAP products receive the most security notes with SAP CVEs, January 2023 to the latest Patch Day.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
Most patched
Most critical
Method: each note is assigned to the first product in its CVE record. Trailing qualifiers in parentheses are removed and common spelling variants are folded (for example, all “SAP NetWeaver Application Server for ABAP …” variants). “Notes” counts distinct notes. “Rows” counts entries across monthly tables, so a note with CVEs in three months counts three times. Priority (derived from CVSS, not SAP’s priority) uses each note’s latest listing.