SAP_SE SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-76976SAP_BASIS 731 ; SAP_BASIS 740 ; SAP_BASIS 750 ; …Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)MEDIUM 5.40.1 %
CVE-2025-26653KRNL64NUC 7.22 ; 7.22EXT ; KRNL64UC 7.22 ; …Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)MEDIUM 4.70.2 %
CVE-2025-26659KRNL64UC 7.53 ; KERNEL 7.53 ; KERNEL 7.54 ; …Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)MEDIUM 6.10.2 %
CVE-2025-0059KRNL64UC 7.53 ; KERNEL 7.53 ; 7.54 ; …Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)MEDIUM 6.00.2 %