Skip to content
Sap Netweaver Application Server Abap vulnerabilities
-
sap netweaver application server abap
CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-27680
3.1 Low
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2026-40135
6.5 Medium
-
sap netweaver application server abap, sap se netweaver application server abap (applications based on business server pages) +1 more
Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages)
CVE-2026-27682
4.7 Medium
-
sap netweaver application server abap
Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
CVE-2026-34257
6.1 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-27688
5.0 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
CVE-2026-24316
6.4 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24310
3.5 Low
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP
CVE-2026-24309
6.4 Medium
-
sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 more
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
CVE-2026-0488
9.9 Critical
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2026-0506
8.1 High
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2024-41728
2.7 Low
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
CVE-2024-44114
2.0 Low
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2024-41734
4.3 Medium
-
sap netweaver application server abap
Improper Access Control in SAP Netweaver Application Server ABAP
CVE-2024-41732
4.7 Medium
-
sap se netweaver and abap platform, sap netweaver application server abap +1 more
Denial of service (DOS) in SAP NetWeaver and ABAP platform
CVE-2024-33001
6.5 Medium
-
sap netweaver application server abap, sap se netweaver application server abap (sap kernel) +1 more
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel)
CVE-2024-24740
5.3 Medium
-
sap se netweaver abap application server and abap platform, sap netweaver application server abap +1 more
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform
CVE-2024-21738
4.1 Medium
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2023-49581
4.1 Medium
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2023-41366
5.3 Medium
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Missing Authorization check in SAP CommonCryptoLib
CVE-2023-40309
9.8 Critical
-
sap se netweaver as abap (applications based on unified rendering), sap netweaver application server abap +1 more
Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)
CVE-2023-40624
5.5 Medium
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Memory Corruption vulnerability in SAP CommonCryptoLib
CVE-2023-40308
7.5 High
-
sap netweaver application server abap, sap se netweaver as abap and abap platform +1 more
Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2023-37492
4.9 Medium
-
sap netweaver application server abap, sap se netweaver as abap and abap platform +1 more
Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2023-35874
6.0 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-28763
6.5 Medium
-
sap se gui for html, sap netweaver, netweaver application server abap +2 more
Cross-Site Scripting (XSS) vulnerability in SAP GUI for HTML
CVE-2023-27499
6.1 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27501
8.7 High
-
sap netweaver as for abap and abap platform (saprsbro program), netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27500
9.6 Critical
-
sap netweaver application server for abap and abap platform, netweaver application server abap +1 more
Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27270
6.5 Medium
-
sap netweaver application server for abap and abap platform, netweaver application server abap +1 more
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27269
9.6 Critical
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-25618
6.5 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-26459
7.4 High
-
sap netweaver as abap (bsp framework), netweaver application server abap +1 more
SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751,...
CVE-2023-25614
6.1 Medium
-
sap netweaver as abap (bsp framework), netweaver application server abap +1 more
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions...
CVE-2023-24522
6.1 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...
CVE-2023-23860
6.1 Medium
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...
CVE-2023-23859
6.1 Medium
-
sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 more
Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...
CVE-2023-23858
6.1 Medium
-
sap netweaver as abap and abap platform, netweaver application server abap +1 more
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740,...
CVE-2023-23854
3.8 Low
-
sap netweaver application server for abap and abap platform, netweaver application server abap +1 more
An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform -...
CVE-2023-23853
6.1 Medium
-
sap netweaver abap server and abap platform, netweaver application server abap, netweaver application server abap kernel +2 more +4 more
Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-0014
9.0 Critical
-
sap netweaver as for abap and abap platform, netweaver application server abap +1 more
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-0013
6.1 Medium
-
sap se netweaver abap server and abap platform, sap netweaver application server abap +1 more
SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...
CVE-2022-41215
4.7 Medium
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...
CVE-2022-41214
8.7 High
-
sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 more
Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...
CVE-2022-41212
4.9 Medium
-
sap netweaver application server abap, sap se netweaver as abap (sap gui for html within the fiori launchpad) +1 more
An attacker with no prior authentication could craft and send malicious script to SAP GUI for...
CVE-2022-39799
6.1 Medium
-
sap netweaver application server abap, sap se netweaver as abap +1 more
An attacker with basic business user privileges could craft and upload a malicious file to SAP...
CVE-2022-35294
5.4 Medium
-
sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 more
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...
CVE-2022-29611
8.8 High
-
sap netweaver application server abap
SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...
CVE-2022-29610
5.4 Medium
-
sap se netweaver application server for abap, sap netweaver application server abap +1 more
Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...
CVE-2022-26102
5.4 Medium
-
sap se netweaver as abap (workplace server), sap netweaver application server abap +1 more
SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753,...
CVE-2022-22540
7.5 High
- Show olderLoading…