Advisories · Technology

SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform.

Every CVE that names SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-58236 CVE record

CVSS 5.5 Medium

OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Command injection
Not analysed yet 11 Aug 2026
CVE-2026-0509 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Feb 2026
CVE-2026-0506 CVE record

CVSS 8.1 High

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Broken access control
Not analysed yet 13 Jan 2026
CVE-2025-42969 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-31329 CVE record

CVSS 6.2 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- CWE-141
Not analysed yet 13 May 2025
CVE-2024-41734 CVE record

CVSS 4.3 Medium

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-33006 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Unrestricted file upload
Not analysed yet 14 May 2024
CVE-2024-32733 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Cross-site scripting (XSS)
Not analysed yet 14 May 2024
CVE-2023-49581 CVE record

CVSS 4.1 Medium

SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- SQL injection
Not analysed yet 12 Dec 2023
CVE-2023-41366 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Information disclosure
Not analysed yet 14 Nov 2023
CVE-2022-41214 CVE record

CVSS 8.7 High

Improper input validation in SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- CWE-20
Not analysed yet 8 Nov 2022
CVE-2022-41212 CVE record

CVSS 4.9 Medium

Path traversal in SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Path traversal
Not analysed yet 8 Nov 2022
CVE-2022-22545 CVE record

Information disclosure in SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform
- Information disclosure
Not analysed yet 9 Feb 2022