Known vulnerabilities in SAP NetWeaver AS ABAP 756

Vendor: SAP
Software: SAP NetWeaver AS ABAP
Version: 756
Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SAP NetWeaver AS ABAP version 756 SAP NetWeaver AS ABAP 756 is affected by 30 vulnerabilities: 10 medium, 20 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125963 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-34257		 CWE-601 Low
No
No
 - 14.04.2026 SB2026041494
#VU123670 - Missing Authorization
CVE-2026-24310		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123669 - Missing Authorization
CVE-2026-27688		 CWE-862 Low
No
No
 - 10.03.2026 SB2026031033
#VU123667 - Missing Authorization
CVE-2026-24309		 CWE-862 Medium
No
No
 - 10.03.2026 SB2026031033
#VU123666 - Server-Side Request Forgery (SSRF)
CVE-2026-24316		 CWE-918 Medium
No
No
 - 10.03.2026 SB2026031033
#VU117343 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-42901		 CWE-94 Medium
No
No
 - 17.10.2025 SB2025101738
#VU109020 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31329		 CWE-200 Low
No
No
 - 13.05.2025 SB2025051328
#VU105495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25242		 CWE-79 Low
No
No
 - 11.03.2025 SB2025031119
#VU105493 - Missing Authorization
CVE-2025-26661		 CWE-862 Medium
No
No
 - 11.03.2025 SB2025031119
#VU103915 - Improper Access Control
CVE-2025-24872		 CWE-284 Low
No
No
 - 12.02.2025 SB2025021260
#VU103914 - Exposure of sensitive information to an unauthorized actor
CVE-2025-23193		 CWE-200 Medium
No
No
 - 12.02.2025 SB2025021260
#VU102589 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0053		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102588 - Missing Authorization
CVE-2025-0068		 CWE-862 Low
No
No
 - 14.01.2025 SB2025011427
#VU102587 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-0063		 CWE-89 Medium
No
No
 - 14.01.2025 SB2025011427
#VU102586 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0066		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011427
#VU98127 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37180		 CWE-200 Low
No
No
 - 08.10.2024 SB2024100817
#VU96974 - Improper input validation
CVE-2024-42371		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96975 - Improper input validation
CVE-2024-44117		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96976 - Improper input validation
CVE-2024-45285		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012
#VU96977 - Improper input validation
CVE-2024-42380		 CWE-20 Low
No
No
 - 10.09.2024 SB2024091012


Showing elements 1 - 20 out of 30