SAP SE SAP NetWeaver AS ABAP and ABAP Platform

• CVE-2026-44751 High 7.1 Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform 0.2%
• CVE-2026-44748 Critical 9.9 XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform 0.2%
• CVE-2026-27671 Critical 9.8 Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform 0.4%
• CVE-2026-23687 High 8.8 XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform 0.5%
• CVE-2025-42902 Medium 5.3 Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform 0.4%
• CVE-2025-0063 High 8.8 SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform 0.7%
• CVE-2024-30218 Medium 6.5 Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform 0.5%
• CVE-2023-37492 Medium 4.9 Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform 0.5%
• CVE-2023-35874 Medium 6.0 Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform 0.4%
• CVE-2021-40496 Unrated SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication f 0.9%
• CVE-2021-38178 Unrated The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code 1.3%
• CVE-2021-40495 Unrated There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the p 1.1%
• CVE-2021-38181 Unrated SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by c 1.1%
• CVE-2021-33684 Medium 5.3 SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7. 1.0%
• CVE-2021-33677 Medium 6.5 SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure. 0.9%
• CVE-2021-27610 Critical 9.0 SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and d 1.3%