Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

NetWeaver

Made by SAP. 10 of its vulnerabilities are known to have been exploited.

Coverage

No recent stories mention this product.

Actively exploited

CVE-2025-42999RansomwareCVSS 9.1

SAP NetWeaver

SAP NetWeaver Deserialization Vulnerability

Added May 15, 2025Fed. due Jun 5, 2025
CVE-2025-31324RansomwareCVSS 9.8

SAP NetWeaver

SAP NetWeaver Unrestricted File Upload Vulnerability

Added Apr 29, 2025Fed. due May 20, 2025
CVE-2017-12637CVSS 7.5

SAP NetWeaver

SAP NetWeaver Directory Traversal Vulnerability

Added Mar 19, 2025Fed. due Apr 9, 2025
CVE-2016-2386CVSS 9.8

SAP NetWeaver

SAP NetWeaver SQL Injection Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022
CVE-2021-38163CVSS 8.8

SAP NetWeaver

SAP NetWeaver Unrestricted File Upload Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022
CVE-2016-2388CVSS 5.3

SAP NetWeaver

SAP NetWeaver Information Disclosure Vulnerability

Added Jun 9, 2022Fed. due Jun 30, 2022
CVE-2010-5326CVSS 10.0

SAP NetWeaver

SAP NetWeaver Remote Code Execution Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022
CVE-2020-6287CVSS 10.0

SAP NetWeaver

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022
CVE-2016-3976CVSS 7.5

SAP NetWeaver

SAP NetWeaver Directory Traversal Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022
CVE-2016-9563CVSS 6.5

SAP NetWeaver

SAP NetWeaver XML External Entity (XXE) Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022