Sap Netweaver Application Server Abap (Sap Se) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-08-11. Vendor: Sap Se.
CVEs of Sap Netweaver Application Server Abap
- CVE-2026-66779 - CVSS 6.3 (medium), 2026-08-11: Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make…
- CVE-2026-44747 - CVSS 9.9 (critical), 2026-07-14: SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could…
- CVE-2026-27680 - CVSS 4.3 (medium), 2026-05-14: Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets…
- CVE-2026-34257 - CVSS 6.1 (medium), 2026-04-14: Due to an Open Redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft malicious URL that, if accessed by a…
- CVE-2025-42945 - CVSS 6.1 (medium), 2025-08-12: SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as payload and trick…
- CVE-2025-42956 - CVSS 6.1 (medium), 2025-07-08: SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available.…
- CVE-2025-42981 - CVSS 6.1 (medium), 2025-07-08: Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious…
- CVE-2025-23186 - CVSS 8.5 (high), 2025-04-08: In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted…
- CVE-2025-25242 - CVSS 6.1 (medium), 2025-03-11: SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting (XSS)…
- CVE-2025-0068 - CVSS 4.3 (medium), 2025-01-14: An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker…
- CVE-2024-54198 - CVSS 8.5 (high), 2024-12-10: In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted…
- CVE-2024-47593 - CVSS 4.3 (medium), 2024-11-12: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be…
- CVE-2024-41732 - CVSS 5.4 (medium), 2024-08-13: SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web…
- CVE-2022-29610 - CVSS 5.4 (medium), 2022-05-11: SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could result in Stored…
