Sap Netweaver Application Server Java vulnerabilities
69 published vulnerabilities in Sap Netweaver Application Server Java, 7 of them exploited in the wild. The most were published in 2020 (15), and 2 so far in 2026.
Sap Netweaver Application Server Java vulnerabilities by year
2010
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Sap Netweaver Application Server Java vulnerabilities
- CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function
- CVE-2010-5326 SAP NetWeaver Remote Code Execution
- CVE-2016-2386 SAP NetWeaver SQL Injection
- CVE-2017-12637 SAP NetWeaver Directory Traversal
- CVE-2016-3976 SAP NetWeaver Directory Traversal
- CVE-2016-9563 SAP NetWeaver XML External Entity (XXE)
- CVE-2016-2388 SAP NetWeaver Information Disclosure
- CVE-2021-37535 Missing authorization in SAP NetWeaver Application Server Java (JMS Connector Service)
- CVE-2020-26829 Missing authorization in SAP NetWeaver AS JAVA (P2P Cluster Communication)
- CVE-2023-40309 Missing Authorization check in SAP CommonCryptoLib
- CVE-2022-22532 Memory corruption in SAP NetWeaver Application Server Java
- CVE-2019-0345 Server-side request forgery in SAP NetWeaver Application Server for Java (Administrator System Overview)
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.