Skip to content
Sap Se Netweaver As Java vulnerabilities
-
sap se netweaver as java (adobe document services)
Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)
CVE-2026-58235
6.3 Medium
-
sap se netweaver as java (jdbc test servlet)
Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)
CVE-2026-44746
6.1 Medium
-
sap se netweaver as java (adobe document service)
Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)
CVE-2025-42927
3.4 Low
-
sap se netweaver as java (iiop service)
Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)
CVE-2025-42925
4.3 Medium
-
sap se netweaver as java (deploy web service)
Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)
CVE-2025-42922
9.9 Critical
-
sap se netweaver as java (user admin application)
Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)
CVE-2025-0057
4.8 Medium
-
sap se netweaver as java
XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
CVE-2024-47582
5.3 Medium
-
sap se netweaver as java (system landscape directory), sap netweaver system landscape directory +1 more
Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)
CVE-2024-42372
6.5 Medium
-
sap se netweaver as java (logon application)
Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)
CVE-2024-45280
4.8 Medium
-
sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more
Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
CVE-2024-28164
5.3 Medium
-
sap netweaver, sap se netweaver as java, sap netweaver application server java +2 more
Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)
CVE-2024-34688
7.5 High
-
sap se netweaver as java user management engine
Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine
CVE-2024-27899
8.8 High
-
sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 more
Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
CVE-2024-22127
Public exploit
9.1 Critical
-
sap se netweaver as java (guided procedures), sap netweaver application server java +1 more
XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)
CVE-2024-24743
8.6 High
-
sap se netweaver as java (user admin application), sap netweaver application server java +1 more
Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)
CVE-2024-22126
6.1 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
Information Disclosure in NetWeaver AS Java Logon
CVE-2023-42480
5.3 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)
CVE-2023-42477
6.5 Medium
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Missing Authorization check in SAP CommonCryptoLib
CVE-2023-40309
9.8 Critical
-
sap commoncryptolib, content server, extended application services and runtime +8 more +10 more
Memory Corruption vulnerability in SAP CommonCryptoLib
CVE-2023-40308
7.5 High
-
sap se netweaver as java, sap netweaver application server java +1 more
Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...
CVE-2020-26826
6.5 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...
CVE-2020-26820
9.1 Critical
-
sap se netweaver as java, sap netweaver application server java +1 more
Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...
CVE-2020-6263
6.9 Medium
-
sap se netweaver as java, sap netweaver application server java +1 more
Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...
CVE-2019-0391
4.3 Medium
-
sap netweaver as java, netweaver application server java +1 more
The logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...
CVE-2018-2452
6.1 Medium