Sap Basis vulnerabilities

• sap se business workflow, sap basis +1 more Missing authorization check in SAP Business Workflow CVE-2026-24312 5.2 MediumFebruary 10, 2026
• sap se netweaver as abap and abap platform, sap basis +1 more XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform CVE-2026-23687 8.8 HighFebruary 10, 2026
• sap se netweaver application server abap and sap s/4hana, sap basis +1 more Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA CVE-2026-0484 6.5 MediumFebruary 10, 2026
• sap se netweaver application server for abap (background processing), sap basis +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) CVE-2025-42918 4.3 MediumSeptember 9, 2025
• sap se netweaver (service data download), sap basis +1 more Missing Authorization check in SAP NetWeaver (Service Data Download) CVE-2025-42911 5.0 MediumSeptember 9, 2025
• sap se netweaver application server for abap, sap basis +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP CVE-2025-42936 5.4 MediumAugust 12, 2025
• sap se netweaver application server abap, sap basis +1 more Multiple vulnerabilities in SAP NetWeaver Application Server ABAP CVE-2025-42956 6.1 MediumJuly 8, 2025
• sap basis, sap se netweaver and abap platform +1 more Missing Authorization check in SAP NetWeaver and ABAP Platform CVE-2025-42986 4.3 MediumJuly 8, 2025
• sap se netweaver server abap, sap basis +1 more Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP CVE-2025-23193 5.3 MediumFebruary 11, 2025
• sap se netweaver as for abap and abap platform (internet communication framework), sap basis +1 more Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) CVE-2025-0066 9.9 CriticalJanuary 14, 2025
• sap se netweaver as abap and abap platform, sap basis +1 more SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform CVE-2025-0063 8.8 HighJanuary 14, 2025
• sap se business workflow and sap flexible workflow, sap basis +1 more Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow CVE-2025-0058 6.5 MediumJanuary 14, 2025
• sap se netweaver application server for abap and abap platform, sap basis +1 more Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2025-0053 5.3 MediumJanuary 14, 2025
• sap se netweaver application server for abap and abap platform, sap basis +1 more [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2024-37180 4.1 MediumJuly 9, 2024
• sap se netweaver application server for abap and abap platform, sap basis +1 more [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2024-39599 4.7 MediumJuly 9, 2024
• sap business workflow, sap se business workflow (webflow services), sap basis +1 more +3 more [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services) CVE-2024-34689 5.0 MediumJuly 9, 2024
• sap se netweaver application server for abap and abap platform, sap basis +1 more Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform CVE-2024-34687 6.5 MediumMay 14, 2024
• sap application interface framework (message dashboard), application interface framework, basis +2 more +4 more Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) CVE-2023-29110 3.7 LowApril 11, 2023
• sap application interface framework (message dashboard), application interface framework, basis +2 more +4 more Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) CVE-2023-29109 4.4 MediumApril 11, 2023
• sap basis Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751... CVE-2022-41264 8.8 HighDecember 13, 2022
• sap basis, sap se automated note search tool (sap basis) +1 more Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7... CVE-2020-6307 4.3 MediumJanuary 14, 2020
• sap basis, netweaver, sap se gateway of abap application server(sap basis) +1 more +3 more Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7... CVE-2019-0248 5.9 MediumJanuary 8, 2019
• sap business application software integrated solution, basis (abap platform), basis (as abap of sap netweaver) +2 more Necessary authorization checks for an authenticated user, resulting in escalation of privileges,... CVE-2018-2494 8.0 HighDecember 11, 2018
• sap basis, basis (trex / bwa installation) +1 more An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA... CVE-2018-2478 7.2 HighNovember 13, 2018
• sap netweaver, aba, basis +2 more The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might... CVE-2016-4551 7.5 HighOctober 5, 2016
• sap basis communication services SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute... CVE-2013-3063 6.0 MediumMay 1, 2013
• sap netweaver nw04, netweaver nw04s, basis component 640 +1 more +3 more Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04... CVE-2007-3496 4.3 MediumJune 29, 2007
• sap basis component 700, basis component 640 +1 more Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework ... CVE-2007-3495 4.3 MediumJune 29, 2007