# Sap Netweaver Application Server Abap


- [CVE-2022-22536](https://insights.sbomify.com/CVE-2022-22536/): SAP Multiple Products HTTP Request Smuggling (critical 9.8, exploited in the wild)
- [CVE-2026-0488](https://insights.sbomify.com/CVE-2026-0488/): Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) (critical 9.9)
- [CVE-2023-40309](https://insights.sbomify.com/CVE-2023-40309/): Missing Authorization check in SAP CommonCryptoLib (critical 9.8)
- [CVE-2021-44231](https://insights.sbomify.com/CVE-2021-44231/): Code injection in SAP ABAP Server & ABAP Platform (Translation Tools) (critical 9.8)
- [CVE-2021-40499](https://insights.sbomify.com/CVE-2021-40499/): Code injection in SAP NetWeaver Application Server for ABAP (SAP Cloud Print Manager and SAPSprint) (critical 9.8)
- [CVE-2023-27269](https://insights.sbomify.com/CVE-2023-27269/): Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (critical 9.6)
- [CVE-2023-27500](https://insights.sbomify.com/CVE-2023-27500/): Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (critical 9.6)
- [CVE-2023-0014](https://insights.sbomify.com/CVE-2023-0014/): Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (critical 9.0)
- [CVE-2021-27610](https://insights.sbomify.com/CVE-2021-27610/): Auth bypass in SAP NetWeaver AS ABAP and ABAP Platform (critical 9.0)
- [CVE-2022-29611](https://insights.sbomify.com/CVE-2022-29611/): Missing authorization in SAP NetWeaver Application Server for ABAP and ABAP Platform (high 8.8)
- [CVE-2021-38178](https://insights.sbomify.com/CVE-2021-38178/): Business logic in SAP NetWeaver AS ABAP and ABAP Platform (high 8.8)
- [CVE-2019-0257](https://insights.sbomify.com/CVE-2019-0257/): Missing authorization in ABAP Platform(SAP Basis) (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/sap/netweaver-application-server-abap/