SAP_SE SAP NetWeaver Application Server for ABAP
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-58246 | SAP_BASIS 740 ; SAP_BASIS 750 ; SAP_BASIS 751 ; … | Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-27688 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 5.0 | 0.2 % | ||
| CVE-2026-24316 | SAP_BASIS 740 ; SAP_BASIS 750 ; SAP_BASIS 751 ; … | Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP | MEDIUM 6.4 | 0.2 % | ||
| CVE-2026-24310 | SAP_BASIS 702 ; SAP_BASIS 731 ; SAP_BASIS 740 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-24309 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-42882 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-42908 | KRNL64UC 7.53 ; KERNEL 7.53 ; 7.54 ; … | Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-42942 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-42936 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-42961 | SAP_BASIS 700 ; SAP_BASIS 701 ; SAP_BASIS 702 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-42953 | SAP_BASIS 701 ; SAP_BASIS 702 ; SAP_BASIS 731 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | HIGH 8.1 | 0.5 % | ||
| CVE-2025-42989 | KERNEL 7.89 ; 7.93 ; 9.14 ; … | Missing Authorization check in SAP NetWeaver Application Server for ABAP | CRITICAL 9.6 | 0.4 % |