Skip to contentSap Se Netweaver As Java vulnerabilities
- sap se netweaver as java (web services)Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)CVE-2026-891295.8 Medium
- sap se netweaver as java (process integration test tool)Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool)CVE-2026-891285.3 Medium
- sap se netweaver as java edm applicationMissing Authentication check in SAP NetWeaver AS Java EDM ApplicationCVE-2026-891147.5 High
- sap se netweaver as java (adobe document services)Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)CVE-2026-582356.3 Medium
- sap se netweaver as java (jdbc test servlet)Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)CVE-2026-447466.1 Medium
- sap se netweaver as java (adobe document service)Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)CVE-2025-429273.4 Low
- sap se netweaver as java (iiop service)Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)CVE-2025-429254.3 Medium
- sap se netweaver as java (deploy web service)Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)CVE-2025-429229.9 Critical
- sap se netweaver as java (user admin application)Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)CVE-2025-00574.8 Medium
- sap se netweaver as javaXML Entity Expansion Vulnerability in SAP NetWeaver AS JAVACVE-2024-475825.3 Medium
- sap se netweaver as java (system landscape directory), sap netweaver system landscape directory +1 moreMissing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)CVE-2024-423726.5 Medium
- sap se netweaver as java (logon application)Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application)CVE-2024-452804.8 Medium
- sap netweaver, sap se netweaver as java, sap netweaver application server java +2 moreInformation Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)CVE-2024-281645.3 Medium
- sap netweaver, sap se netweaver as java, sap netweaver application server java +2 moreDenial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository)CVE-2024-346887.5 High
- sap se netweaver as java user management engineSecurity misconfiguration vulnerability in SAP NetWeaver AS Java User Management EngineCVE-2024-278998.8 High
- sap netweaver, sap se netweaver as java (administrator log viewer plug-in), sap netweaver application server java +2 moreCode Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)CVE-2024-22127Public exploit9.1 Critical
- sap se netweaver as java (guided procedures), sap netweaver application server java +1 moreXXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)CVE-2024-247438.6 High
- sap se netweaver as java (user admin application), sap netweaver application server java +1 moreCross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)CVE-2024-221266.1 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreServer-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)CVE-2023-424776.5 Medium
- sap commoncryptolib, content server, extended application services and runtime +8 more +10 moreMissing Authorization check in SAP CommonCryptoLibCVE-2023-403099.8 Critical
- sap commoncryptolib, content server, extended application services and runtime +8 more +10 moreMemory Corruption vulnerability in SAP CommonCryptoLibCVE-2023-403087.5 High
- sap se netweaver as java, sap netweaver application server java +1 moreProcess Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...CVE-2020-268266.5 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreSAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...CVE-2020-268209.1 Critical
- sap se netweaver as java, sap netweaver application server java +1 moreStandalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...CVE-2020-62636.9 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap netweaver as java, netweaver application server java +1 moreThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...CVE-2018-24526.1 Medium