Advisories · Technology

SAP_SE SAP NetWeaver Application Server ABAP.

Every CVE that names SAP_SE SAP NetWeaver Application Server ABAP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66779 CVE record

CVSS 6.3 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Cross-site scripting (XSS)
Not analysed yet 11 Aug 2026
CVE-2026-44747 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Memory corruption
Not analysed yet 14 Jul 2026
CVE-2026-27680 CVE record

CVSS 3.1 Low

CSS Injection vulnerability in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Broken access control
Not analysed yet 14 May 2026
CVE-2026-34257 CVE record

CVSS 6.1 Medium

Open Redirect vulnerability in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Open redirect
Not analysed yet 14 Apr 2026
CVE-2025-42945 CVE record

CVSS 6.1 Medium

HTML Injection vulnerability in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Code injection
Not analysed yet 12 Aug 2025
CVE-2025-42956 CVE record

CVSS 6.1 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
- SAP SE SAP NetWeaver Application Server ABAP
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-42981 CVE record

CVSS 6.1 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Open redirect
Not analysed yet 8 Jul 2025
CVE-2025-23186 CVE record

CVSS 8.5 High

Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Code injection
Not analysed yet 8 Apr 2025
CVE-2025-25242 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2025
CVE-2025-0068 CVE record

CVSS 4.3 Medium

Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2024-54198 CVE record

CVSS 8.5 High

Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- CWE-914
Not analysed yet 10 Dec 2024
CVE-2024-47593 CVE record

CVSS 4.3 Medium

Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server ABAP
- Broken access control
Not analysed yet 12 Nov 2024
CVE-2024-41732 CVE record

CVSS 4.7 Medium

Improper Access Control in SAP Netweaver Application Server ABAP
- SAP_SE SAP NetWeaver Application Server ABAP
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2022-29610 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Application Server ABAP
- SAP SE SAP NetWeaver Application Server ABAP
- Cross-site scripting (XSS)
Not analysed yet 11 May 2022