Netweaver (Sap) - vulnerabilities (CVEs)

106 CVEs, 0 in the last 30 days, 109 known versions, newest CVE from 2026-02-10. Vendor: Sap.

CVEs of Netweaver

CVE-2026-23685 - CVSS 4.4 (medium), 2026-02-10: Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator with local access could submit specially…
CVE-2025-42968 - CVSS 5 (medium), 2025-07-08: SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive…
CVE-2025-42999 - CVSS 9.1 (critical), 2025-05-13: SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could…
CVE-2025-31324 - CVSS 10 (critical), 2025-04-24: SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious…
CVE-2024-34688 - CVSS 7.5 (high), 2024-06-11: Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may…
CVE-2024-28164 - CVSS 5.3 (medium), 2024-06-11: SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be…
CVE-2024-33006 - CVSS 9.6 (critical), 2024-05-14: An unauthenticated attacker can upload a malicious file to the server which when accessed by a victim can allow an attacker to completely compromise system.
CVE-2024-27898 - CVSS 5.3 (medium), 2024-04-09: SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting…
CVE-2024-25644 - CVSS 5.3 (medium), 2024-03-12: Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact…
CVE-2024-22127 - CVSS 9.1 (critical), 2024-03-12: SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous…
CVE-2024-22124 - CVSS 7.5 (high), 2024-01-09: Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC…
CVE-2023-41367 - CVSS 5.3 (medium), 2023-09-12: Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver (Guided Procedures) - version 7.50, can gain access to…
CVE-2023-36922 - CVSS 9.1 (critical), 2023-07-11: Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary…
CVE-2023-33984 - CVSS 6.4 (medium), 2023-06-13: SAP NetWeaver (Design Time Repository) - version 7.50, returns an unfavorable content type for some versioned files, which could allow an authorized attacker…
CVE-2023-32114 - CVSS 2.7 (low), 2023-06-13: SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin…
CVE-2023-33985 - CVSS 6.1 (medium), 2023-06-13: SAP NetWeaver Enterprise Portal - version 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site…
CVE-2023-29186 - CVSS 8.7 (high), 2023-04-11: In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files…
CVE-2023-27499 - CVSS 6.1 (medium), 2023-04-11: SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently…
CVE-2023-0021 - CVSS 6.1 (medium), 2023-03-14: Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may…
CVE-2022-28217 - CVSS 6.5 (medium), 2022-06-13: Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary…
CVE-2022-28772 - CVSS 7.5 (high), 2022-04-12: By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or…
CVE-2022-28773 - CVSS 7.5 (high), 2022-04-12: Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but…
CVE-2022-22534 - CVSS 6.1 (medium), 2022-02-09: Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and…
CVE-2021-38183 - CVSS 6.1 (medium), 2021-10-12: SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a…
CVE-2021-38163 - CVSS 9.9 (critical), 2021-09-14: SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can…
CVE-2021-21481 - CVSS 9.6 (critical), 2021-03-09: The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might…
CVE-2020-6285 - CVSS 7.7 (high), 2020-07-14: SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access…
CVE-2020-6203 - CVSS 9.1 (critical), 2020-03-10: SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of…
CVE-2020-6185 - CVSS 5.4 (medium), 2020-02-12: Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54),…
CVE-2020-6181 - CVSS 5.8 (medium), 2020-02-12: Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions…
CVE-2020-6184 - CVSS 6.1 (medium), 2020-02-12: Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54),…
CVE-2011-1517 - CVSS 9.8 (critical), 2020-02-05: SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet,…
CVE-2013-1593 - CVSS 7.5 (high), 2020-01-23: A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when…
CVE-2013-1592 - CVSS 9.8 (critical), 2020-01-23: A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server…
CVE-2019-0351 - CVSS 8.8 (high), 2019-08-14: A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Because of…
CVE-2019-0248 - CVSS 5.9 (medium), 2019-01-08: Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access…
CVE-2018-2476 - CVSS 6.1 (medium), 2018-11-13: Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.
CVE-2018-2477 - CVSS 8.8 (high), 2018-11-13: Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted…
CVE-2018-2470 - CVSS 6.1 (medium), 2018-10-09: In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode…
CVE-2018-2464 - CVSS 6.1 (medium), 2018-09-11: SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting…
CVE-2018-2462 - CVSS 8.8 (high), 2018-09-11: In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document…
CVE-2018-2434 - CVSS 4.3 (medium), 2018-07-10: A content spoofing vulnerability in the following components allows to render html pages containing arbitrary plain text content, which might fool an end…
CVE-2018-2363 - CVSS 8.8 (high), 2018-01-09: SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program…
CVE-2015-7241 - CVSS 9.8 (critical), 2017-09-06: XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.
CVE-2017-9845 - CVSS 7.5 (high), 2017-07-12: disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka…
CVE-2017-9844 - CVSS 7.5 (high), 2017-07-12: SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object…
CVE-2016-10311 - CVSS 9.8 (critical), 2017-04-10: Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the…
CVE-2017-5372 - CVSS 7.5 (high), 2017-01-23: The function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows remote attackers to obtain sensitive system information by…
CVE-2016-7437 - CVSS 3.3 (low), 2016-10-13: SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected…
CVE-2016-3635 - CVSS 7.5 (high), 2016-10-13: SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote…
CVE-2016-7435 - CVSS 9.1 (critical), 2016-10-05: The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12…
CVE-2016-4551 - CVSS 7.5 (high), 2016-10-05: The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the…
CVE-2016-4015 - CVSS 7.5 (high), 2016-04-14: The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka…
CVE-2016-4014 - CVSS 8.6 (high), 2016-04-14: XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang)…
CVE-2016-2389 - CVSS 7.5 (high), 2016-02-16: Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver…
CVE-2016-2387 - CVSS 6.1 (medium), 2016-02-16: Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject…
CVE-2016-1911 - CVSS 6.1 (medium), 2016-01-15: Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to…
CVE-2016-1910 - CVSS 5.3 (medium), 2016-01-15: The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.
CVE-2015-6662 - CVSS 6.8 (medium), 2015-08-24: XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact…
CVE-2015-5067 - CVSS 7.5 (high), 2015-06-24: The (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded credentials, which allows remote attackers to obtain access via…
CVE-2015-2817 - CVSS 5 (medium), 2015-04-01: The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note…
CVE-2015-2815 - CVSS 6.5 (medium), 2015-04-01: Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote…
CVE-2014-0995 - CVSS 5 (medium), 2014-11-06: The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash)…
CVE-2014-8592 - CVSS 5 (medium), 2014-11-04: Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination)…
CVE-2014-8591 - CVSS 5 (medium), 2014-11-04: Unspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of…
CVE-2014-8587 - CVSS 7.5 (high), 2014-11-04: SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to…
CVE-2014-6252 - CVSS 6.5 (medium), 2014-09-05: Buffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to…
CVE-2014-4003 - CVSS 7.5 (high), 2014-06-09: The System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.
CVE-2014-3787 - CVSS 5 (medium), 2014-05-19: SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
CVE-2013-7364 - CVSS 7.5 (high), 2014-04-10: An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to…
CVE-2014-1963 - CVSS 5 (medium), 2014-02-14: Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.
CVE-2014-1961 - CVSS 5 (medium), 2014-02-14: Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.
CVE-2014-1965 - CVSS 4.3 (medium), 2014-02-14: Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through…
CVE-2014-1960 - CVSS 5 (medium), 2014-02-14: The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2014-1964 - CVSS 4.3 (medium), 2014-02-14: Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote…
CVE-2013-7094 - CVSS 7.5 (high), 2013-12-13: SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via…
CVE-2013-6869 - CVSS 7.5 (high), 2013-11-23: SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via…
CVE-2013-6822 - CVSS 10 (critical), 2013-11-20: GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity (XXE) issue.
CVE-2013-6821 - CVSS 5 (medium), 2013-11-20: Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-6823 - CVSS 6.4 (medium), 2013-11-20: GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2013-6815 - CVSS 5 (medium), 2013-11-20: The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of…
CVE-2013-6814 - CVSS 5.8 (medium), 2013-11-20: The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and…
CVE-2013-6819 - CVSS 4.3 (medium), 2013-11-20: Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via…
CVE-2013-6816 - CVSS 4.3 (medium), 2013-11-20: Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP NetWeaver allow remote attackers to…
CVE-2013-6244 - CVSS 5 (medium), 2013-10-24: The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read…
CVE-2013-5751 - CVSS 5 (medium), 2013-09-16: Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-5723 - CVSS 7.5 (high), 2013-09-12: SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to…
CVE-2013-3319 - CVSS 5 (medium), 2013-08-16: The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP…
CVE-2011-5263 - CVSS 4.3 (medium), 2013-02-12: Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitrary web script or…
CVE-2011-5260 - CVSS 4.3 (medium), 2013-02-12: Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page…
CVE-2012-2512 - CVSS 5 (medium), 2012-05-15: The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote…
CVE-2012-2611 - CVSS 9.3 (critical), 2012-05-15: The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and…
CVE-2012-2511 - CVSS 5 (medium), 2012-05-15: The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote…
CVE-2012-2514 - CVSS 5 (medium), 2012-05-15: The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote…
CVE-2012-2513 - CVSS 5 (medium), 2012-05-15: The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to…
CVE-2012-2612 - CVSS 5 (medium), 2012-05-15: The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers…
CVE-2012-1290 - CVSS 4.3 (medium), 2012-02-23: Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to…
CVE-2012-1289 - CVSS 4 (medium), 2012-02-23: Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the…
CVE-2012-1292 - CVSS 5 (medium), 2012-02-23: Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the…
CVE-2012-1291 - CVSS 5 (medium), 2012-02-23: Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information…