Advisories · Technology

SAP_SE SAP NetWeaver Enterprise Portal.

Every CVE that names SAP_SE SAP NetWeaver Enterprise Portal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-89122 CVE record

CVSS 6.1 Medium

Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Open redirect
Not analysed yet 13 Oct 2026
CVE-2026-89118 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Information disclosure
Not analysed yet 13 Oct 2026
CVE-2026-89117 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-44759 CVE record

CVSS 6.1 Medium

Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-0499 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2026
CVE-2025-42872 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- CWE-489
Not analysed yet 9 Dec 2025
CVE-2025-42884 CVE record

CVSS 6.5 Medium

JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Other injection
Not analysed yet 11 Nov 2025
CVE-2024-44120 CVE record

CVSS 4.7 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2024
CVE-2024-25645 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)
- SAP_SE SAP NetWeaver (Enterprise Portal)
- Broken access control
Not analysed yet 12 Mar 2024
CVE-2023-33985 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- SAP_SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 13 Jun 2023
CVE-2022-35225 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2022
CVE-2022-35172 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2022
CVE-2022-35170 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2022
CVE-2022-32247 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2022
CVE-2022-26105 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2022
CVE-2022-24397 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 9 Mar 2022
CVE-2022-24395 CVE record

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 8 Mar 2022
CVE-2021-33705 CVE record

CVSS 8.1 High

Server-side request forgery in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Server-side request forgery (SSRF)
Not analysed yet 15 Sept 2021
CVE-2021-21489 CVE record

CVSS 4.8 Medium

SAP SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50…
- SAP SE SAP NetWeaver Enterprise Portal
Not analysed yet 14 Sept 2021
CVE-2021-33702 CVE record

CVSS 8.3 High

Cross-site scripting in SAP SE SAP NetWeaver Enterprise Portal
- SAP SE SAP NetWeaver Enterprise Portal
- Cross-site scripting (XSS)
Not analysed yet 10 Aug 2021