Sap Netweaver And Abap Platform (Sap Se) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2026-09-08. Vendor: Sap Se.
CVEs of Sap Netweaver And Abap Platform
- CVE-2026-76963 - CVSS 4.3 (medium), 2026-09-08: Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access…
- CVE-2026-34265 - CVSS 9.8 (critical), 2026-08-11: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption.…
- CVE-2025-42986 - CVSS 4.3 (medium), 2025-07-08: Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote…
- CVE-2024-47593 - CVSS 4.3 (medium), 2024-11-12: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be…
- CVE-2024-33001 - CVSS 6.5 (medium), 2024-06-11: SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of…
- CVE-2022-27668 - CVSS 9.8 (critical), 2022-06-14: Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter…
- CVE-2022-29616 - CVSS 7.5 (high), 2022-05-11: SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption.
- CVE-2022-22536 - CVSS 10 (critical), 2022-02-09: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for…