SAP_SE SAP NetWeaver Application Server ABAP
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-66779 | SAP_UI 754 ; 755 ; 756 ; … | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-44747 | KRNL64NUC 7.22 ; 7.22EXT ; KRNL64UC 7.22 ; … | Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-27680 | SAP_UI 758 ; 816 | CSS Injection vulnerability in SAP NetWeaver Application Server ABAP | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-34257 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Open Redirect vulnerability in SAP NetWeaver Application Server ABAP | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-42945 | KRNL64UC 7.53 ; KERNEL 7.53 ; 7.54 ; … | HTML Injection vulnerability in SAP NetWeaver Application Server ABAP | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-42981 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Multiple vulnerabilities in SAP NetWeaver Application Server ABAP | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-23186 | KRNL64NUC 7.22 ; 7.22EXT ; KRNL64UC 7.22 ; … | Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | HIGH 8.5 | 0.5 % | ||
| CVE-2025-25242 | SAP_BASIS 740 ; SAP_BASIS 750 ; SAP_BASIS 751 ; … | Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-0068 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-54198 | KRNL64NUC 7.22 ; 7.22EXT ; KRNL64UC 7.22 ; … | Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | HIGH 8.5 | 0.6 % | ||
| CVE-2024-47593 | KRNL64UC 7.53 ; KERNEL 7.53 ; 7.54 ; … | Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | MEDIUM 4.3 | 0.4 % | ||
| CVE-2024-41732 | SAP_UI 754 ; 755 ; 756 ; … | Improper Access Control in SAP Netweaver Application Server ABAP | MEDIUM 5.4 | 0.3 % |