Advisories · Technology

SAP_SE SAP NetWeaver Application Server Java.

Every CVE that names SAP_SE SAP NetWeaver Application Server Java among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-23686 CVE record

CVSS 3.4 Low

CRLF Injection vulnerability in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Other injection
Not analysed yet 10 Feb 2026
CVE-2025-42919 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Path traversal
Not analysed yet 11 Nov 2025
CVE-2025-42926 CVE record

CVSS 5.3 Medium

Missing Authentication check in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Authentication bypass
Not analysed yet 9 Sept 2025
CVE-2025-42978 CVE record

CVSS 3.5 Low

Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- CWE-940
Not analysed yet 8 Jul 2025
CVE-2025-27431 CVE record

CVSS 5.4 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2025
CVE-2025-24869 CVE record

CVSS 4.3 Medium

Information Disclosure vulnerability in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Broken access control
Not analysed yet 11 Feb 2025
CVE-2025-0054 CVE record

CVSS 5.4 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Cross-site scripting (XSS)
Not analysed yet 11 Feb 2025
CVE-2025-0067 CVE record

CVSS 6.3 Medium

Missing Authorization check in SAP NetWeaver Application Server Java
- SAP_SE SAP NetWeaver Application Server Java
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2022-22533 CVE record

Use after free in SAP SE SAP NetWeaver Application Server Java
- SAP SE SAP NetWeaver Application Server Java
- Memory corruption
Not analysed yet 9 Feb 2022
CVE-2022-22532 CVE record

HTTP request smuggling in SAP SE SAP NetWeaver Application Server Java
- SAP SE SAP NetWeaver Application Server Java
- HTTP request smuggling
Not analysed yet 9 Feb 2022
CVE-2020-6365 CVE record

CVSS 4.7 Medium

SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirect users to a malicious site due to insufficient reverse tabn…
- SAP SE SAP NetWeaver Application Server Java
Not analysed yet 15 Oct 2020
CVE-2020-6319 CVE record

CVSS 6.1 Medium

SAP SE SAP NetWeaver Application Server Java: SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40…
- SAP SE SAP NetWeaver Application Server Java
Not analysed yet 15 Oct 2020