SAP SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)

• CVE-2026-76976 Medium 5.4 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) 0.1%
• CVE-2025-26653 Medium 4.7 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) 0.2%
• CVE-2025-26659 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) 0.2%
• CVE-2025-0059 Medium 6.0 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) 0.2%
• CVE-2021-33665 Medium 5.4 SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - 7.49,7.53,7.77,7.81,7.84, does not sufficiently encode user- 0.5%