Known vulnerabilities in SAP NetWeaver AS ABAP

Vendor: SAP
Software: SAP NetWeaver AS ABAP
Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP NetWeaver AS ABAP SAP NetWeaver AS ABAP is affected by 71 known vulnerabilities: 3 critical, 4 high, 30 medium, 34 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141511 - Memory corruption
CVE-2026-34265		 CWE-119 Critical
No
No
 - 12.08.2026 SB2026081203
#VU137495 - Memory corruption
CVE-2026-44747		 CWE-119 High
No
No
 - 14.07.2026 SB2026071480
#VU137506 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44760		 CWE-79 Low
No
No
 - 14.07.2026 SB2026071480
#VU133999 - Missing Authorization
CVE-2026-40128		 CWE-862 Medium
No
No
 - 09.06.2026 SB2026060922
SB2026060942
#VU133998 - Memory corruption
CVE-2026-27671		 CWE-119 Critical
No
No
 - 09.06.2026 SB2026060922
#VU133997 - Improper Verification of Cryptographic Signature
CVE-2026-44748		 CWE-347 High
No
No
 - 09.06.2026 SB2026060922
#VU125963 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-34257		 CWE-601 Low
No
No
 - 14.04.2026 SB2026041494
#VU125970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27680		 CWE-79 Low
No
No
 - 14.04.2026 SB2026041494
#VU123670 - Missing Authorization
CVE-2026-24310		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123669 - Missing Authorization
CVE-2026-27688		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123667 - Missing Authorization
CVE-2026-24309		 CWE-862 Medium
No
No
 - 10.03.2026 SB2026031033
#VU123666 - Server-Side Request Forgery (SSRF)
CVE-2026-24316		 CWE-918 Medium
No
No
 - 10.03.2026 SB2026031033
#VU122527 - Out-of-bounds read
CVE-2026-24320		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021028
#VU122526 - Improper Verification of Cryptographic Signature
CVE-2026-23687		 CWE-347 Medium
No
No
 - 10.02.2026 SB2026021028
#VU122525 - Missing Authorization
CVE-2026-0509		 CWE-862 Medium
No
No
 - 10.02.2026 SB2026021028
#VU121197 - Missing Authorization
CVE-2026-0506		 CWE-862 Medium
No
No
 - 13.01.2026 SB2026011339
#VU121196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-0507		 CWE-78 Low
No
No
 - 13.01.2026 SB2026011339
#VU119394 - Exposure of sensitive information to an unauthorized actor
CVE-2025-42904		 CWE-200 Medium
No
No
 - 09.12.2025 SB2025120916
#VU118709 - Protection Mechanism Failure
CVE-2025-42883		 CWE-693 Low
No
No
 - 24.11.2025 SB2025112441
#VU118707 - Missing Authorization
CVE-2025-42882		 CWE-862 Low
No
No
 - 24.11.2025 SB2025112441


Showing elements 1 - 20 out of 71