Advisories · Technology

SAP_SE SAP NetWeaver and ABAP Platform.

Every CVE that names SAP_SE SAP NetWeaver and ABAP Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76963 CVE record

CVSS 4.3 Medium

Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
- SAP_SE SAP NetWeaver and ABAP Platform
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-34265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
- SAP_SE SAP NetWeaver and ABAP Platform
- Memory corruption
Not analysed yet 11 Aug 2026
CVE-2025-42986 CVE record

CVSS 4.3 Medium

Missing Authorization check in SAP NetWeaver and ABAP Platform
- SAP_SE SAP NetWeaver and ABAP Platform
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2024-33001 CVE record

CVSS 6.5 Medium

Denial of service (DOS) in SAP NetWeaver and ABAP platform
- SAP_SE SAP NetWeaver and ABAP platform
- Denial of service
Not analysed yet 11 Jun 2024
CVE-2022-27668 CVE record

Incorrect authorization in SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP NetWeaver and ABAP Platform
- Broken access control
Not analysed yet 14 Jun 2022
CVE-2022-29616 CVE record

Out-of-bounds write in SAP SE SAP NetWeaver and ABAP Platform and others
- SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP Host Agent
- Memory corruption
Not analysed yet 11 May 2022
CVE-2022-22536 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

HTTP request smuggling in SAP SE SAP NetWeaver and ABAP Platform and others
- SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP Web Dispatcher
- HTTP request smuggling
Not analysed yet 9 Feb 2022