# Sap Netweaver Application Server Java


- [CVE-2020-6287](https://insights.sbomify.com/CVE-2020-6287/): SAP NetWeaver Missing Authentication for Critical Function (critical 10.0, exploited in the wild)
- [CVE-2010-5326](https://insights.sbomify.com/CVE-2010-5326/): SAP NetWeaver Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2016-2386](https://insights.sbomify.com/CVE-2016-2386/): SAP NetWeaver SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2017-12637](https://insights.sbomify.com/CVE-2017-12637/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2016-3976](https://insights.sbomify.com/CVE-2016-3976/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2016-9563](https://insights.sbomify.com/CVE-2016-9563/): SAP NetWeaver XML External Entity (XXE) (medium 6.5, exploited in the wild)
- [CVE-2016-2388](https://insights.sbomify.com/CVE-2016-2388/): SAP NetWeaver Information Disclosure (medium 5.3, exploited in the wild)
- [CVE-2021-37535](https://insights.sbomify.com/CVE-2021-37535/): Missing authorization in SAP NetWeaver Application Server Java (JMS Connector Service) (critical 10.0)
- [CVE-2020-26829](https://insights.sbomify.com/CVE-2020-26829/): Missing authorization in SAP NetWeaver AS JAVA (P2P Cluster Communication) (critical 10.0)
- [CVE-2023-40309](https://insights.sbomify.com/CVE-2023-40309/): Missing Authorization check in SAP CommonCryptoLib (critical 9.8)
- [CVE-2022-22532](https://insights.sbomify.com/CVE-2022-22532/): Memory corruption in SAP NetWeaver Application Server Java (critical 9.8)
- [CVE-2019-0345](https://insights.sbomify.com/CVE-2019-0345/): Server-side request forgery in SAP NetWeaver Application Server for Java (Administrator System Overview) (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/sap/netweaver-application-server-java/