Sap Netweaver vulnerabilities

• sap netweaver application server abap CSS Injection vulnerability in SAP NetWeaver Application Server ABAP CVE-2026-27680 3.1 LowMay 14, 2026
• sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2026-40135 6.5 MediumMay 12, 2026
• sap netweaver application server abap, sap se netweaver application server abap (applications based on business server pages) +1 more Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) CVE-2026-27682 4.7 MediumMay 12, 2026
• sap netweaver application server abap Open Redirect vulnerability in SAP NetWeaver Application Server ABAP CVE-2026-34257 6.1 MediumApril 14, 2026
• sap netweaver application server java, sap se netweaver application server java (web dynpro java) +1 more Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) CVE-2026-27674 6.1 MediumApril 14, 2026
• sap se netweaver application server for abap, sap netweaver application server abap +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP CVE-2026-27688 5.0 MediumMarch 10, 2026
• sap se netweaver application server for abap, sap netweaver application server abap +1 more Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP CVE-2026-24316 6.4 MediumMarch 10, 2026
• sap se netweaver application server for abap, sap netweaver application server abap +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP CVE-2026-24310 3.5 LowMarch 10, 2026
• sap se netweaver application server for abap, sap netweaver application server abap +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP CVE-2026-24309 6.4 MediumMarch 10, 2026
• sap se netweaver and abap platform (application server abap), sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 more Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) CVE-2026-24320 3.1 LowFebruary 10, 2026
• sap netweaver application server java CRLF Injection vulnerability in SAP NetWeaver Application Server Java CVE-2026-23686 3.4 LowFebruary 10, 2026
• sap netweaver, sap se netweaver (jms service) +1 more Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) CVE-2026-23685 4.4 MediumFebruary 10, 2026
• sap se netweaver application server abap and abap platform, sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 more Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2026-0509 9.6 CriticalFebruary 10, 2026
• sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) CVE-2026-0488 9.9 CriticalFebruary 10, 2026
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2026-0506 8.1 HighJanuary 13, 2026
• sap netweaver application server java Missing Authentication check in SAP NetWeaver Application Server Java CVE-2025-42926 5.3 MediumSeptember 9, 2025
• sap netweaver, sap se netweaver (rfc enabled function module) +1 more Missing Authorization check in SAP NetWeaver (RFC enabled function module) CVE-2025-42968 5.0 MediumJuly 8, 2025
• sap netweaver, sap se netweaver (visual composer development server) +1 more Insecure Deserialization in SAP NetWeaver (Visual Composer development server) CVE-2025-42999 In KEV EPSS 12.9% 9.1 CriticalMay 13, 2025
• sap netweaver, sap se netweaver (visual composer development server) +1 more Missing Authorization check in SAP NetWeaver (Visual Composer development server) CVE-2025-31324 In KEVPublic exploit EPSS 99.5% 10.0 CriticalApril 24, 2025
• sap netweaver application server java, sap se netweaver application server java (logon application) +1 more Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) CVE-2024-47592 5.3 MediumNovember 12, 2024
• sap se netweaver application server for abap and abap platform, sap netweaver abap application server +1 more NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2024-47586 5.3 MediumNovember 12, 2024
• sap se netweaver as java (system landscape directory), sap netweaver system landscape directory +1 more Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory) CVE-2024-42372 6.5 MediumNovember 12, 2024
• sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 more Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) CVE-2024-47594 5.4 MediumOctober 8, 2024
• sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2024-41728 2.7 LowSeptember 10, 2024
• sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform CVE-2024-44114 2.0 LowSeptember 10, 2024
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2024-41734 4.3 MediumAugust 13, 2024
• sap netweaver application server abap Improper Access Control in SAP Netweaver Application Server ABAP CVE-2024-41732 4.7 MediumAugust 13, 2024
• sap content server, web dispatcher, sap se netweaver application server (abap and java),sap web dispatcher and sap content server +2 more +4 more Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server CVE-2024-33005 6.3 MediumAugust 13, 2024
• sap se netweaver knowledge management xmleditor, sap netweaver knowledge management and collaboration \(kmc-cm\) +1 more [CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor CVE-2024-34685 6.1 MediumJuly 9, 2024
• sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) CVE-2024-28164 5.3 MediumJune 11, 2024
• sap se netweaver and abap platform, sap netweaver application server abap +1 more Denial of service (DOS) in SAP NetWeaver and ABAP platform CVE-2024-33001 6.5 MediumJune 11, 2024
• sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) CVE-2024-34688 7.5 HighJune 11, 2024
• sap netweaver, sap se netweaver application server abap and abap platform +1 more File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2024-33006 9.6 CriticalMay 14, 2024
• sap netweaver Server-Side Request Forgery in SAP NetWeaver CVE-2024-27898 5.3 MediumApril 9, 2024
• sap se netweaver (enterprise portal), sap netweaver enterprise portal +1 more Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal) CVE-2024-25645 5.3 MediumMarch 12, 2024
• sap netweaver process integration, sap se netweaver process integration (support web pages) +1 more Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages) CVE-2024-28163 5.3 MediumMarch 12, 2024
• sap netweaver as abap, sap se netweaver as abap applications based on sapgui for html (webgui) +1 more Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI) CVE-2024-27902 5.4 MediumMarch 12, 2024
• sap netweaver, sap se netweaver (wsrm) +1 more Information Disclosure vulnerability in NetWeaver (WSRM) CVE-2024-25644 5.3 MediumMarch 12, 2024
• sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 more Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in) CVE-2024-22127 Public exploit 9.1 CriticalMarch 12, 2024
• sap se netweaver as java (guided procedures), sap netweaver application server java +1 more XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) CVE-2024-24743 8.6 HighFebruary 13, 2024
• sap netweaver application server abap, sap se netweaver application server abap (sap kernel) +1 more Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel) CVE-2024-24740 5.3 MediumFebruary 13, 2024
• sap netweaver business client for html Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Business Client for HTML CVE-2024-22128 4.7 MediumFebruary 13, 2024
• sap se netweaver as java (user admin application), sap netweaver application server java +1 more Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application) CVE-2024-22126 6.1 MediumFebruary 13, 2024
• sap netweaver, sap se netweaver (internet communication manager) +1 more Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager CVE-2024-22124 4.1 MediumJanuary 9, 2024
• sap se netweaver abap application server and abap platform, sap netweaver application server abap +1 more Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform CVE-2024-21738 4.1 MediumJanuary 9, 2024
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2023-49581 4.1 MediumDecember 12, 2023
• sap se netweaver as java, sap netweaver application server java +1 more Information Disclosure in NetWeaver AS Java Logon CVE-2023-42480 5.3 MediumNovember 14, 2023
• sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2023-41366 5.3 MediumNovember 14, 2023
• sap se netweaver as java, sap netweaver application server java +1 more Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) CVE-2023-42477 6.5 MediumOctober 10, 2023
• sap commoncryptolib, content server, extended application services and runtime +8 more +10 more Missing Authorization check in SAP CommonCryptoLib CVE-2023-40309 9.8 CriticalSeptember 12, 2023
• Show olderLoading…