Sap Application Server Java vulnerabilities

• sap netweaver application server java, sap se netweaver application server java (web dynpro java) +1 more Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) CVE-2026-27674 6.1 MediumApril 14, 2026
• sap netweaver application server java CRLF Injection vulnerability in SAP NetWeaver Application Server Java CVE-2026-23686 3.4 LowFebruary 10, 2026
• sap netweaver application server java Missing Authentication check in SAP NetWeaver Application Server Java CVE-2025-42926 5.3 MediumSeptember 9, 2025
• sap netweaver application server java, sap se netweaver application server java (logon application) +1 more Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) CVE-2024-47592 5.3 MediumNovember 12, 2024
• sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) CVE-2024-28164 5.3 MediumJune 11, 2024
• sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) CVE-2024-34688 7.5 HighJune 11, 2024
• sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 more Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in) CVE-2024-22127 Public exploit 9.1 CriticalMarch 12, 2024
• sap se netweaver as java (guided procedures), sap netweaver application server java +1 more XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) CVE-2024-24743 8.6 HighFebruary 13, 2024
• sap se netweaver as java (user admin application), sap netweaver application server java +1 more Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application) CVE-2024-22126 6.1 MediumFebruary 13, 2024
• sap se netweaver as java, sap netweaver application server java +1 more Information Disclosure in NetWeaver AS Java Logon CVE-2023-42480 5.3 MediumNovember 14, 2023
• sap se netweaver as java, sap netweaver application server java +1 more Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) CVE-2023-42477 6.5 MediumOctober 10, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Missing Authorization check in SAP CommonCryptoLib CVE-2023-40309 9.8 CriticalSeptember 12, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Memory Corruption vulnerability in SAP CommonCryptoLib CVE-2023-40308 7.5 HighSeptember 12, 2023
• sap netweaver application server java, netweaver as java for classload service +1 more Improper Access Control in SAP NetWeaver AS Java (Classload Service) CVE-2023-24526 5.3 MediumMarch 14, 2023
• sap netweaver as for java (http provider service), netweaver application server java +1 more Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7... CVE-2022-41262 6.1 MediumDecember 12, 2022
• sap se netweaver (real time messaging framework), sap netweaver application server java +1 more Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an... CVE-2022-26103 5.3 MediumMarch 8, 2022
• sap netweaver application server java Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22... CVE-2022-22533 7.5 HighFebruary 9, 2022
• sap netweaver application server java In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22... CVE-2022-22532 9.8 CriticalFebruary 9, 2022
• sap netweaver application server java, sap se netweaver application server java (jms connector service) +1 more SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31,... CVE-2021-37535 10.0 CriticalSeptember 14, 2021
• sap se netweaver as java (enterprise portal), sap netweaver application server java +1 more SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals... CVE-2021-33687 4.5 MediumJuly 14, 2021
• sap netweaver application server java, sap se netweaver as java (administrator applications) +1 more When user with insufficient privileges tries to access any application in SAP NetWeaver... CVE-2021-33689 3.5 LowJuly 14, 2021
• sap netweaver application server java, sap se netweaver as for java (http service) +1 more SAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7... CVE-2021-33670 7.5 HighJuly 14, 2021
• sap netweaver application server java, sap se netweaver as for java (telnet commands) +1 more An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an... CVE-2021-21485 7.4 HighApril 13, 2021
• sap netweaver application server java, sap se netweaver as for java (applications based on htmlb for java) +1 more SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized... CVE-2021-27601 5.4 MediumApril 13, 2021
• sap netweaver application server java, sap se netweaver as for java (http service) +1 more SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7... CVE-2021-21492 4.3 MediumApril 13, 2021
• sap netweaver application server java, sap se netweaver as for java (customer usage provisioning servlet) +1 more SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows... CVE-2021-27598 6.5 MediumApril 13, 2021
• sap netweaver application server java, sap se netweaver application server java (applications based on web dynpro java) +1 more SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10,... CVE-2021-21491 4.7 MediumMarch 10, 2021
• sap se netweaver as java, sap netweaver application server java +1 more Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an... CVE-2020-26826 6.5 MediumDecember 9, 2020
• sap se netweaver as java (p2p cluster communication), sap netweaver application server java +1 more SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50,... CVE-2020-26829 10.0 CriticalDecember 9, 2020
• sap netweaver application server java, sap se netweaver as java (key storage service) +1 more SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the... CVE-2020-26816 5.4 MediumDecember 9, 2020
• sap se netweaver as java, sap netweaver application server java +1 more SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is... CVE-2020-26820 9.1 CriticalNovember 10, 2020
• sap netweaver application server java SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an... CVE-2020-6365 4.7 MediumOctober 15, 2020
• sap netweaver application server java SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50... CVE-2020-6319 6.1 MediumOctober 15, 2020
• sap netweaver application server java, sap se netweaver as java (xml forms) +1 more SAP NetWeaver Application Server JAVA(XML Forms) versions 7.30, 7.31, 7.40, 7.50 does not... CVE-2020-6313 5.4 MediumSeptember 9, 2020
• sap netweaver application server java, sap se netweaver as java (engineapi), netweaver as java (j2ee-frmw) +1 more +3 more SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50;... CVE-2020-6309 7.5 HighAugust 12, 2020
• sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 more SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not... CVE-2020-6287 In KEVPublic exploit EPSS 94.7% 10.0 CriticalJuly 14, 2020
• sap se netweaver as java (lm configuration wizard), sap netweaver application server java +1 more The insufficient input path validation of certain parameter in the web service of SAP NetWeaver... CVE-2020-6286 Public exploit EPSS 24.3% 5.3 MediumJuly 14, 2020
• sap se netweaver as java (iiop service) (core-tools), netweaver as java (iiop service) (servercore), sap netweaver application server java +2 more SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7... CVE-2020-6282 5.8 MediumJuly 14, 2020
• sap se netweaver as java, sap netweaver application server java +1 more Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00... CVE-2020-6263 6.9 MediumJune 10, 2020
• sap se netweaver as java (http service), sap netweaver application server java +1 more SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows... CVE-2020-6224 4.5 MediumApril 14, 2020
• sap netweaver application server java, sap se netweaver application server java (user management engine) +1 more SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30,... CVE-2020-6202 5.5 MediumMarch 10, 2020
• sap se netweaver as java (heap dump application), sap netweaver application server java +1 more Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7... CVE-2020-6190 5.8 MediumFebruary 12, 2020
• sap se netweaver as java, sap netweaver application server java +1 more Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)... CVE-2019-0391 4.3 MediumNovember 13, 2019
• sap netweaver application server java, sap se netweaver application server java (j2ee-framework) +1 more An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in... CVE-2019-0389 8.8 HighNovember 13, 2019
• sap netweaver application server java, sap se netweaver as for java (web container)-engineapi, netweaver as for java (web container)-sap-jeecor +2 more SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30,... CVE-2019-0355 7.2 HighSeptember 10, 2019
• sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 more A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for... CVE-2019-0345 9.8 CriticalAugust 14, 2019
• sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 more SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7... CVE-2019-0327 7.2 HighJuly 10, 2019
• sap se netweaver application server for java (startup framework), sap netweaver application server java +1 more Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions... CVE-2019-0318 5.3 MediumJuly 10, 2019
• sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 more SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10... CVE-2019-0275 5.4 MediumMarch 12, 2019
• sap netweaver application server java, netweaver as java (servercore) +1 more SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host... CVE-2018-2504 6.1 MediumDecember 11, 2018
• Show olderLoading…