Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
14 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| May 15, 2025 | CVE-2025-42999 Ransomware | SAP · NetWeaver | SAP NetWeaver Deserialization Vulnerability | Critical 9.1 | 12.9% | Jun 5, 2025 |
| Apr 29, 2025 | CVE-2025-31324 Ransomware | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | Critical 10.0 | 99.5% | May 20, 2025 |
| Mar 19, 2025 | CVE-2017-12637 | SAP · NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | High 7.5 | 95.1% | Apr 9, 2025 |
| Sep 30, 2024 | CVE-2019-0344 | SAP · Commerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 7.5% | Oct 21, 2024 |
| Aug 18, 2022 | CVE-2022-22536 | SAP · Multiple Products | SAP Multiple Products HTTP Request Smuggling Vulnerability | Critical 9.8 | 97.9% | Sep 8, 2022 |
| Jun 9, 2022 | CVE-2021-38163 | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | Critical 9.9 | 36.9% | Jun 30, 2022 |
| Jun 9, 2022 | CVE-2016-2388 | SAP · NetWeaver | SAP NetWeaver Information Disclosure Vulnerability | Medium 5.3 | 52.2% | Jun 30, 2022 |
| Jun 9, 2022 | CVE-2016-2386 | SAP · NetWeaver | SAP NetWeaver SQL Injection Vulnerability | Critical 9.8 | 71.5% | Jun 30, 2022 |
| Nov 3, 2021 | CVE-2020-6287 | SAP · NetWeaver | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | Critical 10.0 | 94.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-6207 | SAP · Solution Manager | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | Critical 10.0 | 98.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-2380 Ransomware | SAP · Customer Relationship Management (CRM) | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | Medium 6.6 | 28.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-9563 | SAP · NetWeaver | SAP NetWeaver XML External Entity (XXE) Vulnerability | Medium 6.5 | 24.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3976 | SAP · NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | High 7.5 | 47.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2010-5326 | SAP · NetWeaver | SAP NetWeaver Remote Code Execution Vulnerability | Critical 10.0 | 17.8% | May 3, 2022 |