Sap Netweaver vulnerabilities, page 3

98 vulnerabilities

Known vulnerabilities in Sap Netweaver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2016-10311sap · netweaversap netweaverStack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238.EPSS2.23%7.5HighCVE-2016-3635sap · netweaversap netweaverSAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function Modules (RFM) by leveraging a connection created from earlier execution of an anonymous RFM included in a Communication Assembly, aka SAP Security Note 2139366.EPSS2.44%5MediumCVE-2025-42968sap_se · sap netweaver (rfc enabled function module) +1 moreMissing Authorization check in SAP NetWeaver (RFC enabled function module)SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.EPSS0.27%9.1CriticalCVE-2025-42999sap_se · sap netweaver (visual composer development server) +1 moreInsecure Deserialization in SAP NetWeaver (Visual Composer development server)SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.KEVRansomwareEPSS12.85%10CriticalCVE-2025-31324sap_se · sap netweaver (visual composer development server) +1 moreMissing Authorization check in SAP NetWeaver (Visual Composer development server)SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.KEVRansomwareEPSS99.49%5.8MediumCVE-2020-6181sap se · sap abap platform (sap basis) +3 moresap se sap abap platform (sap basis)Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.EPSS0.78%5.4MediumCVE-2020-6185sap se · sap netweaver (sap basis) +3 moresap se sap netweaver (sap basis)Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability.EPSS0.54%7.7HighCVE-2020-6285sap se · sap netweaver - xml toolkit for java (engineapi) +1 moresap se sap netweaver - xml toolkit for java (engineapi)SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.EPSS1.10%9.1CriticalCVE-2020-6203sap se · sap netweaver uddi server (services registry) +1 moresap se sap netweaver uddi server (services registry)SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.EPSS1.86%6.1MediumCVE-2020-6184sap se · automated note search tool (sap basis) +2 moresap se automated note search tool (sap basis)Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability.EPSS0.96%4.3MediumCVE-2014-1965sap · netweaversap netweaverCross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP.EPSS1.16%5MediumCVE-2014-1961sap · netweaversap netweaverUnspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.EPSS2.09%5MediumCVE-2014-1963sap · netweaversap netweaverUnspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.EPSS1.57%4.3MediumCVE-2014-1964sap · netweaver +1 moresap netweaverCross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error.EPSS1.16%5MediumCVE-2014-1960sap · netweaver +1 moresap netweaverThe Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.EPSS1.37%5MediumCVE-2014-0995sap · netweaversap netweaverThe Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.EPSS10.48%7.5HighCVE-2014-4003sap · netweaversap netweaverThe System Landscape Directory (SLD) in SAP NetWeaver allows remote attackers to modify information via vectors related to adding a system.EPSS2.99%6.5MediumCVE-2014-6252sap · netweaversap netweaverBuffer overflow in disp+work.exe 7000.52.12.34966 and 7200.117.19.50294 in the Dispatcher in SAP NetWeaver 7.00 and 7.20 allows remote authenticated users to cause a denial of service or execute arbitrary code via unspecified vectors.EPSS2.40%5MediumCVE-2014-8591sap · netweaversap netweaverUnspecified vulnerability in SAP Internet Communication Manager (ICM), as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination) via unknown vectors.EPSS1.86%5MediumCVE-2014-8592sap · netweaversap netweaverUnspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination) via a crafted request.EPSS2.13%