Netweaver Application Server Abap vulnerabilities | LiveThreat CVE Feed

Product

Netweaver Application Server Abap

by Sap · last CVE May 14, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities86 In the news0 Timeline

Severity mix

Critical 11High 18Medium 54Low 3

Severity

All severities86 Critical11 High18 Medium54 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Netweaver Application Server Abap to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-22536 In wildKEV	10.0	98%	Feb 9	SAP Multiple Products HTTP Request Smuggling Vulnerability Affected: 7.22; 7.49; 7.53; 7.77; 7.81; 7.85; +11 more
CVE-2026-0488	9.9	1%	Feb 10	Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) Affected: 700
CVE-2023-40309	9.8	1%	Sep 12	SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation… Affected: 7.22ext; kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; +11 more
CVE-2023-0014	9.8	1%	Jan 10	SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81,… Affected: 700; 701; 702; 710; 711; 730; +10 more
CVE-2021-44231	9.8	1%	Dec 14	Internally used text extraction reports allow an attacker to inject code that can be executed by the application Affected: 701; 740; 750; 751; 752; 753; +4 more
CVE-2021-40499	9.8	1%	Oct 12	Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject… Affected: 7.70; 7.70_pi; 7.70byd
CVE-2021-27610	9.8	1%	Jun 16	SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC… Affected: 700; 701; 702; 731; 740; 750; +6 more
CVE-2020-6275	9.8	1%	Jun 10	SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use… Affected: 700; 701; 702; 710; 711; 730; +7 more
CVE-2023-27501	9.6	1%	Mar 14	SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation… Affected: 700; 701; 702; 731; 740; 750; +8 more
CVE-2023-27269	9.6	1%	Mar 14	SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with… Affected: 700; 701; 702; 731; 740; 750; +8 more
CVE-2023-49581	9.4	1%	Dec 12	SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential Affected: 700; 731; 740; 750