Sap netweaver application server for abap

This hub aggregates every CVE we track for Sap netweaver application server for abap, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Sap netweaver application server for abap.

• CVE-2026-27688Missing Authorization check in SAP NetWeaver Application Server for ABAP5.0Mar 10, 2026
• CVE-2026-24316Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP6.4Mar 10, 2026
• CVE-2026-24310Missing Authorization check in SAP NetWeaver Application Server for ABAP3.5Mar 10, 2026
• CVE-2026-24309Missing Authorization check in SAP NetWeaver Application Server for ABAP6.4Mar 10, 2026
• CVE-2025-42882Missing Authorization check in SAP NetWeaver Application Server for ABAP4.3Nov 11, 2025
• CVE-2025-42908Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP5.4Oct 14, 2025
• CVE-2025-42942Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP6.1Aug 12, 2025
• CVE-2025-42936Missing Authorization check in SAP NetWeaver Application Server for ABAP5.4Aug 12, 2025
• CVE-2025-42961Missing Authorization check in SAP NetWeaver Application Server for ABAP4.9Jul 8, 2025
• CVE-2025-42953Missing Authorization check in SAP NetWeaver Application Server for ABAP8.1Jul 8, 2025
• CVE-2025-42989Missing Authorization check in SAP NetWeaver Application Server for ABAP9.6Jun 10, 2025
• CVE-2022-26102Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transacti...5.4Mar 8, 2022
• CVE-2018-2470In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scrip...6.1Oct 9, 2018