Advisories · Technology

SAP_SE SAP NetWeaver Application Server for ABAP.

Every CVE that names SAP_SE SAP NetWeaver Application Server for ABAP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109802 CVE record

CVSS 6.5 Medium

Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Denial of service
Not analysed yet 10 Nov 2026
CVE-2026-58246 CVE record

CVSS 4.3 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- SAP_SE SAP NetWeaver Application Server for ABAP
- Information disclosure
Not analysed yet 28 Jul 2026
CVE-2026-27688 CVE record

CVSS 5.0 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2026-24316 CVE record

CVSS 6.4 Medium

Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Server-side request forgery (SSRF)
Not analysed yet 10 Mar 2026
CVE-2026-24310 CVE record

CVSS 3.5 Low

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2026-24309 CVE record

CVSS 6.4 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2025-42882 CVE record

CVSS 4.3 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 11 Nov 2025
CVE-2025-42908 CVE record

CVSS 5.4 Medium

Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Cross-site request forgery (CSRF)
Not analysed yet 14 Oct 2025
CVE-2025-42942 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2025
CVE-2025-42936 CVE record

CVSS 5.4 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Privilege escalation
Not analysed yet 12 Aug 2025
CVE-2025-42961 CVE record

CVSS 4.9 Medium

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-42953 CVE record

CVSS 8.1 High

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-42989 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Missing Authorization check in SAP NetWeaver Application Server for ABAP
- SAP_SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 10 Jun 2025
CVE-2022-26102 CVE record

Missing authorization in SAP SE SAP NetWeaver Application Server for ABAP
- SAP SE SAP NetWeaver Application Server for ABAP
- Broken access control
Not analysed yet 8 Mar 2022