Advisories · Technology

SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform.

Every CVE that names SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66767 CVE record

CVSS 7.7 High

Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-40135 CVE record

CVSS 6.5 Medium

OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Command injection
Not analysed yet 12 May 2026
CVE-2025-0070 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2025-0053 CVE record

CVSS 5.3 Medium

Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2024-47585 CVE record

CVSS 4.3 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-47586 CVE record

CVSS 5.3 Medium

NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-45285 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-44117 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-41728 CVE record

CVSS 2.7 Low

Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-44116 CVE record

CVSS 4.3 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-44115 CVE record

CVSS 4.3 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-44114 CVE record

CVSS 2.0 Low

Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-42380 CVE record

CVSS 4.3 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-42371 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-37180 CVE record

CVSS 4.1 Medium

[CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2024-39599 CVE record

CVSS 4.7 Medium

[CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- CWE-693
Not analysed yet 9 Jul 2024
CVE-2024-34687 CVE record

CVSS 6.5 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application server for ABAP and ABAP Platform
- Cross-site scripting (XSS)
Not analysed yet 14 May 2024
CVE-2022-29611 CVE record

Missing authorization in SAP SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP SE SAP NetWeaver Application Server for ABAP and ABAP Platform
- Broken access control
Not analysed yet 11 May 2022