SAP SE SAP NetWeaver

• CVE-2025-42958 Critical 9.1 Missing Authentication check in SAP NetWeaver 0.7%
• CVE-2025-31331 Medium 4.3 Authorization Bypass vulnerability in SAP NetWeaver 0.4%
• CVE-2024-27898 Medium 5.3 Server-Side Request Forgery in SAP NetWeaver 0.4%
• CVE-2023-0021 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver 0.5%
• CVE-2021-38183 Unrated SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web app 0.7%