Known vulnerabilities in SAP NetWeaver AS ABAP 777

Known vulnerabilities in SAP NetWeaver AS ABAP 777

Vendor: SAP

Software: SAP NetWeaver AS ABAP

Version: 777

Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU141511 - Memory corruption CVE-2026-34265	CWE-119	Critical	No	No	-	12.08.2026	SB2026081203
#VU119394 - Exposure of sensitive information to an unauthorized actor CVE-2025-42904	CWE-200	Medium	No	No	-	09.12.2025	SB2025120916
#VU117345 - Memory corruption CVE-2025-42902	CWE-119	Medium	No	No	-	17.10.2025	SB2025101738
#VU117344 - Cross-Site Request Forgery (CSRF) CVE-2025-42908	CWE-352	Medium	No	No	-	17.10.2025	SB2025101738
#VU105494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26659	CWE-79	Low	No	No	-	11.03.2025	SB2025031119
#VU102665 - Exposure of sensitive information to an unauthorized actor CVE-2025-0059	CWE-200	Low	No	No	-	14.01.2025	SB2025011455
#VU102585 - Improper Authentication CVE-2025-0070	CWE-287	Medium	No	No	-	14.01.2025	SB2025011427
#VU101372 - Exposure of sensitive information to an unauthorized actor CVE-2024-54198	CWE-200	Medium	No	No	-	10.12.2024	SB2024121006
#VU100243 - Exposure of sensitive information to an unauthorized actor CVE-2024-47593	CWE-200	Medium	No	No	-	12.11.2024	SB2024111252
#VU100242 - NULL Pointer Dereference CVE-2024-47586	CWE-476	Medium	No	No	-	12.11.2024	SB2024111252
#VU83339 - Exposure of sensitive information to an unauthorized actor CVE-2023-41366	CWE-200	Medium	No	No	-	21.11.2023	SB2023112119
#VU80691 - Memory corruption CVE-2023-40308	CWE-119	Medium	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU80681 - Improper Authentication CVE-2023-40309	CWE-287	High	No	No	-	12.09.2023	SB2023091261 SB2023092234 SB2023092235 and 5 more
#VU78829 - Improper Authentication CVE-2023-35874	CWE-287	Medium	No	No	-	01.08.2023	SB2023080124