Sap Netweaver vulnerabilities
102 published vulnerabilities in Sap Netweaver, 3 of them exploited in the wild. The most were published in 2013 (16), and 1 so far in 2026.
Sap Netweaver vulnerabilities by year
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Sap Netweaver vulnerabilities
- CVE-2025-31324 SAP NetWeaver Unrestricted File Upload
- CVE-2021-38163 SAP NetWeaver Unrestricted File Upload
- CVE-2025-42999 SAP NetWeaver Deserialization
- CVE-2013-6822 XML external entity in n/a
- CVE-2011-1517 Memory corruption in n/a
- CVE-2013-1592 Memory corruption in n/a
- CVE-2015-7241 XML external entity in n/a
- CVE-2016-10311 Memory corruption in n/a
- CVE-2021-21481 Missing authorization in SAP NetWeaver AS JAVA (MigrationService)
- CVE-2012-2611 Code injection in n/a
- CVE-2023-36922 OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)
- CVE-2020-6203 Path traversal in SAP NetWeaver UDDI Server (Services Registry)
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.