Known vulnerabilities in SAP NetWeaver AS ABAP 753

Vendor: SAP
Software: SAP NetWeaver AS ABAP
Version: 753
Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 44
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SAP NetWeaver AS ABAP version 753 SAP NetWeaver AS ABAP 753 is affected by 44 vulnerabilities: 2 critical, 1 high, 20 medium, 21 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141511 - Memory corruption
CVE-2026-34265		 CWE-119 Critical
No
No
 - 12.08.2026 SB2026081203
#VU125963 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-34257		 CWE-601 Low
No
No
 - 14.04.2026 SB2026041494
#VU123670 - Missing Authorization
CVE-2026-24310		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123669 - Missing Authorization
CVE-2026-27688		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123667 - Missing Authorization
CVE-2026-24309		 CWE-862 Medium
No
No
 - 10.03.2026 SB2026031033
#VU123666 - Server-Side Request Forgery (SSRF)
CVE-2026-24316		 CWE-918 Medium
No
No
 - 10.03.2026 SB2026031033
#VU119394 - Exposure of sensitive information to an unauthorized actor
CVE-2025-42904		 CWE-200 Medium
No
No
 - 09.12.2025 SB2025120916
#VU117345 - Memory corruption
CVE-2025-42902		 CWE-119 Medium
No
No
 - 17.10.2025 SB2025101738
#VU117344 - Cross-Site Request Forgery (CSRF)
CVE-2025-42908		 CWE-352 Medium
No
No
 - 17.10.2025 SB2025101738
#VU117343 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-42901		 CWE-94 Medium
No
No
 - 17.10.2025 SB2025101738
#VU109020 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31329		 CWE-200 Low
No
No
 - 13.05.2025 SB2025051328
#VU105495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25242		 CWE-79 Low
No
No
 - 11.03.2025 SB2025031119
#VU105494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26659		 CWE-79 Low
No
No
 - 11.03.2025 SB2025031119
#VU105493 - Missing Authorization
CVE-2025-26661		 CWE-862 Medium
No
No
 - 11.03.2025 SB2025031119
#VU103915 - Improper Access Control
CVE-2025-24872		 CWE-284 Low
No
No
 - 12.02.2025 SB2025021260
#VU103914 - Exposure of sensitive information to an unauthorized actor
CVE-2025-23193		 CWE-200 Medium
No
No
 - 12.02.2025 SB2025021260
#VU102665 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0059		 CWE-200 Low
No
No
 - 14.01.2025 SB2025011455
#VU102588 - Missing Authorization
CVE-2025-0068		 CWE-862 Low
No
No
 - 14.01.2025 SB2025011427
#VU102586 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0066		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102585 - Improper Authentication
CVE-2025-0070		 CWE-287 Medium
No
No
 - 14.01.2025 SB2025011427


Showing elements 1 - 20 out of 44