Skip to content
OpenAdvisories

Product · SAP

SAP NetWeaver

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-31331

    Authorization Bypass vulnerability in SAP NetWeaver

    SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitiv…

    SAP SAP NetWeaver
  • Medium 5.3
    CVE-2024-27898

    Server-Side Request Forgery in SAP NetWeaver

    SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network…

    SAP SAP NetWeaver
  • Medium 6.1
    CVE-2023-0021

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver

    Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. …

    SAP SAP NetWeaver