SAP SE / SAP Netweaver Application Server Java
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-23686 | CRLF Injection vulnerability in SAP NetWeaver Application Server Java | LOW | 3.4 | Feb 10, 2026 |
| CVE-2025-42919 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | MEDIUM | 5.3 | Nov 11, 2025 |
| CVE-2025-42926 | Missing Authentication check in SAP NetWeaver Application Server Java | MEDIUM | 5.3 | Sep 9, 2025 |
| CVE-2025-42978 | Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java | LOW | 3.5 | Jul 8, 2025 |
| CVE-2025-27431 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | MEDIUM | 5.4 | Mar 11, 2025 |
| CVE-2025-24869 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | MEDIUM | 4.3 | Feb 11, 2025 |
| CVE-2025-0054 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | MEDIUM | 5.4 | Feb 11, 2025 |
| CVE-2025-0067 | Missing Authorization check in SAP NetWeaver Application Server Java | MEDIUM | 6.3 | Jan 14, 2025 |
| CVE-2022-22533 | Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7… | HIGH | 7.5 | Feb 9, 2022 |
| CVE-2022-22532 | In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthentic… | CRITICAL | 9.8 | Feb 9, 2022 |
| CVE-2020-6365 | SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote attacker to redirect users to a malicio… | MEDIUM | 6.1 | Oct 15, 2020 |
| CVE-2020-6319 | SAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allows an unauthenticated attacker to include JavaScript blocks… | MEDIUM | 6.1 | Oct 15, 2020 |
| CVE-2015-4091 | XML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecif… | HIGH | 7.5 | May 26, 2015 |
Showing 1 to 12 of 12 CVEs