Skip to contentSap Netweaver vulnerabilities
- sap netweaverXML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.CVE-2015-7241Public exploitEPSS 13.5%9.8 Critical
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP...CVE-2017-12637In KEVPublic exploitEPSS 95.1%7.5 High
- sap netweaver portalCross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver...CVE-2017-114606.1 Medium
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS...CVE-2017-114586.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows...CVE-2017-114576.5 Medium
- sap netweaverdisp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of...CVE-2017-98457.5 High
- sap netweaverSAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly...CVE-2017-98447.5 High
- sap netweaver abapSAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a...CVE-2017-98432.7 Low
- sap netweaver application server javaThe Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote...CVE-2017-89138.8 High
- sap netweaver application server javaSQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP...CVE-2017-77178.8 High
- sap netweaverStack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a...CVE-2016-103119.8 Critical
- sap netweaver application server javaThe SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to...CVE-2016-103046.5 Medium
- sap netweaverThe function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows...CVE-2017-53727.5 High
- sap netweaver, netweaver application server java +1 moreBC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML...CVE-2016-9563In KEVEPSS 24.2%6.5 Medium
- sap netweaver application server javaSAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer...CVE-2016-95627.5 High
- sap netweaverSAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as...CVE-2016-74373.3 Low
- sap netweaverSAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity ...CVE-2016-36357.5 High
- sap netweaverThe (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG...CVE-2016-74359.1 Critical
- sap netweaver, aba, basis +2 moreThe (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might...CVE-2016-45517.5 High
- sap netweaver, netweaver application server java +1 moreThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does...CVE-2010-5326In KEVEPSS 17.8%10.0 Critical
- sap netweaverThe Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a...CVE-2016-40157.5 High
- sap netweaverXML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows...CVE-2016-4014Public exploit8.6 High
- sap netweaver application server javaThe XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization,...CVE-2015-88408.8 High
- sap netweaver, netweaver application server java +1 moreDirectory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-3976In KEVPublic exploitEPSS 47.3%7.5 High
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote...CVE-2016-39756.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1...CVE-2016-3974Public exploitEPSS 14.4%9.1 Critical
- sap netweaver application server javaThe chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java...CVE-2016-39735.3 Medium
- sap netweaverDirectory traversal vulnerability in the GetFileList function in the SAP Manufacturing...CVE-2016-2389Public exploitEPSS 41.4%7.5 High
- sap netweaver, netweaver application server java +1 moreThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to...CVE-2016-2388In KEVPublic exploitEPSS 52.2%5.3 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet...CVE-2016-23876.1 Medium
- sap netweaver, netweaver application server java +1 moreSQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote...CVE-2016-2386In KEVPublic exploitEPSS 71.5%9.8 Critical
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers...CVE-2016-19116.1 Medium
- sap netweaverThe User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified...CVE-2016-1910Public exploit5.3 Medium
- sap netweaver j2ee engineSQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver...CVE-2015-72397.5 High
- sap netweaverXML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to...CVE-2015-66626.8 Medium
- sap netweaverThe (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded...CVE-2015-50677.5 High
- sap netweaver abap application server, netweaver java application server +1 moreSAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination)...CVE-2015-41585.0 Medium
- sap gui, maxdb, netweaver rfc sdk +3 more +5 moreStack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC...CVE-2015-22827.5 High
- sap gui, maxdb, netweaver rfc sdk +3 more +5 moreThe LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in...CVE-2015-22785.0 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to...CVE-2015-40917.5 High
- sap netweaver rfc sdkSAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors,...CVE-2015-39815.0 Medium
- sap netweaverThe SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive...CVE-2015-28175.0 Medium
- sap netweaverBuffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000...CVE-2015-28156.5 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31...CVE-2015-28125.0 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31...CVE-2015-28115.0 Medium
- sap netweaver abapXML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP...CVE-2015-13095.0 Medium
- sap netweaver business client for htmlMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for...CVE-2014-95694.3 Medium
- sap netweaver business warehouseSQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows...CVE-2014-86637.5 High
- sap netweaverThe Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to...CVE-2014-0995Public exploitEPSS 10.5%5.0 Medium
- sap netweaverUnspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote...CVE-2014-85925.0 Medium
- Show moreLoading…