SAP SE SAP NetWeaver (Enterprise Portal)

• CVE-2026-89122 Medium 6.1 Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal 0.1%
• CVE-2026-89118 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal 0.2%
• CVE-2026-89117 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.2%
• CVE-2026-44759 Medium 6.1 Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.3%
• CVE-2026-0499 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.2%
• CVE-2025-42872 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.3%
• CVE-2025-42884 Medium 6.5 JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal 0.3%
• CVE-2024-44120 Medium 4.7 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.2%
• CVE-2024-25645 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal) 0.4%
• CVE-2023-33985 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 0.5%
• CVE-2022-35225 Unrated SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting ( 0.6%
• CVE-2022-35172 Unrated SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerabilit 0.6%
• CVE-2022-35170 Unrated SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting ( 0.6%
• CVE-2022-32247 Unrated SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User i 0.9%
• CVE-2022-26105 Unrated SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user i 0.9%
• CVE-2022-24397 Unrated SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.This reflected c 0.8%
• CVE-2022-24395 Unrated SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerabilit 0.6%
• CVE-2021-33705 High 8.1 The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated attac 2.1%
• CVE-2021-21489 Medium 4.8 SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This 0.6%
• CVE-2021-33702 High 8.3 Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it 1.5%