Skip to content
Sap Netweaver Application Server vulnerabilities
-
sap netweaver application server abap
CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-27680
3.1 Low
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2026-40135
6.5 Medium
-
sap netweaver application server abap, sap se netweaver application server abap (applications based on business server pages) +1 more
Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)
CVE-2026-27682
4.7 Medium
-
sap netweaver application server abap
Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-34257
6.1 Medium
-
sap netweaver application server java, sap se netweaver application server java (web dynpro java) +1 more
Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)
CVE-2026-27674
6.1 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-27688
5.0 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
CVE-2026-24316
6.4 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24310
3.5 Low
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24309
6.4 Medium
-
sap netweaver application server java
CRLF Injection vulnerability in SAP NetWeaver Application Server Java
CVE-2026-23686
3.4 Low
-
sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
CVE-2026-0488
9.9 Critical
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2026-0506
8.1 High
-
sap netweaver application server java
Missing Authentication check in SAP NetWeaver Application Server Java
CVE-2025-42926
5.3 Medium
-
sap netweaver application server java, sap se netweaver application server java (logon application) +1 more
Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)
CVE-2024-47592
5.3 Medium
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2024-41728
2.7 Low
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2024-44114
2.0 Low
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2024-41734
4.3 Medium
-
sap netweaver application server abap
Improper Access Control in SAP Netweaver Application Server ABAP
CVE-2024-41732
4.7 Medium
-
sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more
Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
CVE-2024-28164
5.3 Medium
-
sap se netweaver and abap platform, sap netweaver application server abap +1 more
Denial of service (DOS) in SAP NetWeaver and ABAP platform
CVE-2024-33001
6.5 Medium
-
sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more
Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
CVE-2024-34688
7.5 High
-
sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 more
Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
CVE-2024-22127
Public exploit
9.1 Critical
-
sap se netweaver as java (guided procedures), sap netweaver application server java +1 more
XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)
CVE-2024-24743
8.6 High
-
sap netweaver application server abap, sap se netweaver application server abap (sap kernel) +1 more
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel)
CVE-2024-24740
5.3 Medium
-
sap se netweaver as java (user admin application), sap netweaver application server java +1 more
Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)
CVE-2024-22126
6.1 Medium
-
sap se netweaver abap application server and abap platform, sap netweaver application server abap +1 more
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform
CVE-2024-21738
4.1 Medium
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2023-49581
4.1 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
Information Disclosure in NetWeaver AS Java Logon
CVE-2023-42480
5.3 Medium
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2023-41366
5.3 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)
CVE-2023-42477
6.5 Medium
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Missing Authorization check in SAP CommonCryptoLib
CVE-2023-40309
9.8 Critical
-
sap se netweaver as abap (applications based on unified rendering), sap netweaver application server abap +1 more
Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)
CVE-2023-40624
5.5 Medium
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Memory Corruption vulnerability in SAP CommonCryptoLib
CVE-2023-40308
7.5 High
-
sap netweaver application server abap, sap se netweaver as abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2023-37492
4.9 Medium
-
sap netweaver application server abap, sap se netweaver as abap and abap platform +1 more
Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2023-35874
6.0 Medium
-
sap se netweaver as for java (log viewer), sap netweaver application server for java +1 more
Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)
CVE-2023-31405
5.3 Medium
-
sap se as netweaver java, sap netweaver application server for java +1 more
Improper access control during application start-up in SAP AS NetWeaver JAVA.
CVE-2023-30744
8.2 High
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-28763
6.5 Medium
-
sap se gui for html, sap netweaver, netweaver application server abap +2 more
Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML
CVE-2023-27499
6.1 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27501
8.7 High
-
sap netweaver as for abap and abap platform (saprsbro program), netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27500
9.6 Critical
-
sap netweaver application server for abap and abap platform, netweaver application server abap +1 more
Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27270
6.5 Medium
-
sap netweaver application server for abap and abap platform, netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27269
9.6 Critical
-
sap netweaver as java (object analyzing service), netweaver application server for java +1 more
Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)
CVE-2023-27268
5.3 Medium
-
sap netweaver application server for java, netweaver as for java +1 more
Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)
CVE-2023-26460
5.3 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-25618
6.5 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-26459
7.4 High
-
sap netweaver application server java, netweaver as java for classload service +1 more
Improper Access Control in SAP NetWeaver AS Java (Classload Service)
CVE-2023-24526
5.3 Medium
-
sap netweaver as for java, netweaver application server for java +1 more
Improper Access Control in SAP NetWeaver AS for Java
CVE-2023-23857
9.9 Critical
-
sap netweaver as abap (bsp framework), netweaver application server abap +1 more
SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751,...
CVE-2023-25614
6.1 Medium
- Show olderLoading…