Known vulnerabilities in SAP NetWeaver - page 2

Known vulnerabilities in SAP NetWeaver - page 2

Vendor: SAP

Software: SAP NetWeaver

Software CPE: cpe:2.3:a:sap:sap_netweaver:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 36

Public exploits: 4

Known exploited (KEV): 5

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (36)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU107964 - Deserialization of Untrusted Data CVE-2017-9844	CWE-502	Critical	No	No	-	25.04.2025	SB2017071232
#VU48826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-26835	CWE-79	Medium	No	No	-	08.12.2020	SB2020120813
#VU48823 - Unrestricted Upload of File with Dangerous Type CVE-2020-26826	CWE-434	Medium	No	No	-	08.12.2020	SB2020120810
#VU48818 - Improper Authentication CVE-2020-26829	CWE-287	High	No	No	-	08.12.2020	SB2020120806
#VU46640 - Improper Control of Generation of Code ('Code Injection') CVE-2020-6318	CWE-94	High	No	No	-	11.09.2020	SB2020091108
#VU46637 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-6313	CWE-79	Medium	No	No	-	11.09.2020	SB2020091105
#VU46636 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-6326	CWE-79	Medium	No	No	-	11.09.2020	SB2020091105
#VU29717 - Improper input validation CVE-2020-6286	CWE-20	High	Available	No	-	14.07.2020	SB2020071403
#VU29712 - Exposure of sensitive information to an unauthorized actor CVE-2020-6280	CWE-200	Low	No	No	-	14.07.2020	SB2020071403
#VU29711 - Cross-Site Request Forgery (CSRF) CVE-2020-6282	CWE-352	Medium	No	No	-	14.07.2020	SB2020071403
#VU29710 - Exposure of sensitive information to an unauthorized actor CVE-2020-6285	CWE-200	Low	No	No	-	14.07.2020	SB2020071403
#VU29709 - Improper input validation CVE-2020-6287	CWE-20	High	Available	Exploited	-	14.07.2020	SB2020071403
#VU15932 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2018-2476	CWE-601	Low	No	No	-	16.11.2018	SB2018111338
#VU10640 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-2371	CWE-79	Low	No	No	-	19.02.2018	SB2018021337
#VU8788 - Resource exhaustion CVE-2017-9845	CWE-400	Low	No	No	-	10.10.2017	SB2017101102
#VU7695 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-12637	CWE-22	High	No	Exploited	-	07.08.2017	SB2017080801

Showing elements 21 - 40 out of 36