Sap Netweaver Application Server Java (Sap Se) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-02-10. Vendor: Sap Se.
CVEs of Sap Netweaver Application Server Java
- CVE-2026-23686 - CVSS 3.4 (low), 2026-02-10: Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially…
- CVE-2025-42919 - CVSS 5.3 (medium), 2025-11-11: Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An…
- CVE-2025-42926 - CVSS 5.3 (medium), 2025-09-09: SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web…
- CVE-2025-42978 - CVSS 3.5 (low), 2025-07-08: The widely used component that establishes outbound TLS connections in SAP NetWeaver Application Server Java does not reliably match the hostname that is used…
- CVE-2025-27431 - CVSS 5.4 (medium), 2025-03-11: User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS). This could enable an attacker to…
- CVE-2025-24869 - CVSS 4.3 (medium), 2025-02-11: SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their…
- CVE-2025-0054 - CVSS 5.4 (medium), 2025-02-11: SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application…
- CVE-2025-0067 - CVSS 6.3 (medium), 2025-01-14: Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo…
- CVE-2022-22533 - CVSS 7.5 (high), 2022-02-09: Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL…
- CVE-2022-22532 - CVSS 9.8 (critical), 2022-02-09: In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an…
- CVE-2020-6365 - CVSS 6.1 (medium), 2020-10-15: SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirect users to a…
- CVE-2020-6319 - CVSS 6.1 (medium), 2020-10-15: SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated attacker to include JavaScript blocks…
