Skip to content
OpenAdvisories

Product · SAP_SE

SAP NetWeaver Application Server Java

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.4
    CVE-2026-23686

    CRLF Injection vulnerability in SAP NetWeaver Application Server Java

    Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of …

    SAP_SE SAP NetWeaver Application Server Java
  • Low 3.5
    CVE-2025-42978

    Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java

    The widely used component that establishes outbound TLS connections in SAP NetWeaver Application Server Java does not reliably match the hostname that is used for the connection against the wildcard hostname defined in the received certificate of remote TLS s…

    SAP_SE SAP NetWeaver Application Server Java