SAP SE SAP NetWeaver Application Server ABAP

• CVE-2026-66779 Medium 6.3 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP 0.3%
• CVE-2026-44747 Critical 9.9 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP 0.6%
• CVE-2026-27680 Low 3.1 CSS Injection vulnerability in SAP NetWeaver Application Server ABAP 0.2%
• CVE-2026-34257 Medium 6.1 Open Redirect vulnerability in SAP NetWeaver Application Server ABAP 0.2%
• CVE-2025-42945 Medium 6.1 HTML Injection vulnerability in SAP NetWeaver Application Server ABAP 0.2%
• CVE-2025-42956 Medium 6.1 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP 0.2%
• CVE-2025-42981 Medium 6.1 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP 0.2%
• CVE-2025-23186 High 8.5 Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP 0.5%
• CVE-2025-25242 Medium 6.1 Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP 0.3%
• CVE-2025-0068 Medium 4.3 Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP 0.3%
• CVE-2024-54198 High 8.5 Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP 0.6%
• CVE-2024-47593 Medium 4.3 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform 0.4%
• CVE-2024-41732 Medium 4.7 Improper Access Control in SAP Netweaver Application Server ABAP 0.3%
• CVE-2022-29610 Unrated SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could result in Stored Cross-Site Scripting (XSS) attack. 0.5%