SAP SE SAP NetWeaver Application Server ABAP and ABAP Platform

CVE-2026-58236 Medium 5.5 OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform 0.7%
CVE-2026-0509 Critical 9.6 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform 0.4%
CVE-2026-0506 High 8.1 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform 0.3%
CVE-2025-42969 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.2%
CVE-2025-31329 Medium 6.2 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.4%
CVE-2024-41734 Medium 4.3 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform 0.3%
CVE-2024-33006 Critical 9.6 File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.5%
CVE-2024-32733 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.4%
CVE-2023-49581 Medium 4.1 SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.5%
CVE-2023-41366 Medium 5.3 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform 0.6%
CVE-2022-41212 Medium 4.9 Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is oth 0.9%
CVE-2022-41214 High 8.7 Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is o 0.9%
CVE-2022-22545 Unrated A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 7 0.8%