SAP SE SAP NetWeaver Application Server for ABAP

CVE-2026-58246 Medium 4.3 Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform 0.2%
CVE-2026-27688 Medium 5.0 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.3%
CVE-2026-24316 Medium 6.4 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2026-24310 Low 3.5 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2026-24309 Medium 6.4 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2025-42882 Medium 4.3 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2025-42908 Medium 5.4 Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2025-42942 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2025-42936 Medium 5.4 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.2%
CVE-2025-42961 Medium 4.9 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.4%
CVE-2025-42953 High 8.1 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.5%
CVE-2025-42989 Critical 9.6 Missing Authorization check in SAP NetWeaver Application Server for ABAP 0.4%
CVE-2022-26102 Unrated Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction 0.5%