Known vulnerabilities in SAP NetWeaver AS ABAP - page 2

Vendor: SAP
Software: SAP NetWeaver AS ABAP
Software CPE: cpe:2.3:a:sap:sap_netweaver_as_abap:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP NetWeaver AS ABAP SAP NetWeaver AS ABAP is affected by 71 known vulnerabilities: 3 critical, 4 high, 30 medium, 34 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117345 - Memory corruption
CVE-2025-42902		 CWE-119 Medium
No
No
 - 17.10.2025 SB2025101738
#VU117344 - Cross-Site Request Forgery (CSRF)
CVE-2025-42908		 CWE-352 Medium
No
No
 - 17.10.2025 SB2025101738
#VU117343 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-42901		 CWE-94 Medium
No
No
 - 17.10.2025 SB2025101738
#VU113820 - Missing Authorization
CVE-2025-42953		 CWE-862 Medium
No
No
 - 12.08.2025 SB2025081229
#VU113818 - Missing Authorization
CVE-2025-42961		 CWE-862 Low
No
No
 - 12.08.2025 SB2025081229
#VU113817 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-42969		 CWE-79 Low
No
No
 - 12.08.2025 SB2025081229
#VU113816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-42956		 CWE-79 Low
No
No
 - 12.08.2025 SB2025081229
#VU113815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-42981		 CWE-79 Low
No
No
 - 12.08.2025 SB2025081229
#VU113814 - Improper Authentication
CVE-2025-42959		 CWE-287 High
No
No
 - 12.08.2025 SB2025081229
#VU110686 - Missing Authorization
CVE-2025-42989		 CWE-862 Medium
No
No
 - 10.06.2025 SB2025061012
#VU109020 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31329		 CWE-200 Low
No
No
 - 13.05.2025 SB2025051328
#VU105495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25242		 CWE-79 Low
No
No
 - 11.03.2025 SB2025031119
#VU105494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26659		 CWE-79 Low
No
No
 - 11.03.2025 SB2025031119
#VU105493 - Missing Authorization
CVE-2025-26661		 CWE-862 Medium
No
No
 - 11.03.2025 SB2025031119
#VU103916 - Improper Access Control
CVE-2025-23190		 CWE-284 Low
No
No
 - 12.02.2025 SB2025021260
#VU103915 - Improper Access Control
CVE-2025-24872		 CWE-284 Low
No
No
 - 12.02.2025 SB2025021260
#VU103914 - Exposure of sensitive information to an unauthorized actor
CVE-2025-23193		 CWE-200 Medium
No
No
 - 12.02.2025 SB2025021260
#VU103913 - Missing Authorization
CVE-2025-23189		 CWE-862 Medium
No
No
 - 12.02.2025 SB2025021260
#VU103912 - Missing Authorization
CVE-2025-23187		 CWE-862 Medium
No
No
 - 12.02.2025 SB2025021260
#VU102665 - Exposure of sensitive information to an unauthorized actor
CVE-2025-0059		 CWE-200 Low
No
No
 - 14.01.2025 SB2025011455


Showing elements 21 - 40 out of 71