Netweaver Application Server Abap vulnerabilities | LiveThreat CVE Feed

Product

Netweaver Application Server Abap

by Sap · last CVE May 14, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities86 In the news0 Timeline

Severity mix

Critical 11High 18Medium 54Low 3

Severity

All severities86 Critical11 High18 Medium54 Low3

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Netweaver Application Server Abap to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-29611	8.8	1%	May 11	SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges Affected: 700; 701; 702; 710; 711; 730; +11 more
CVE-2021-38178	8.8	1%	Oct 12	The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user… Affected: 700; 701; 702; 710; 730; 731; +8 more
CVE-2020-26819	8.8	1%	Nov 10	SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read… Affected: 731; 740; 750; 751; 752; 753; +3 more
CVE-2020-26818	8.8	1%	Nov 10	SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive… Affected: 731; 740; 750; 751; 752; 753; +3 more
CVE-2020-6296	8.8	1%	Aug 12	SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755, allows an attacker to inject code that can be executed by the… Affected: 700; 701; 702; 710; 711; 731; +5 more
CVE-2019-0257	8.8	1%	Feb 15	Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does… Affected: 7.0 through 7.02; 7.50 through 7.53; 7.30; 7.31; 7.40
CVE-2022-41214	8.7	1%	Nov 8	Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to… Affected: 700; 731; 740; 750; 789; 804
CVE-2026-0506	8.1	0%	Jan 13	Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform Affected: 700; 701; 702; 731; 740; 750; +9 more
CVE-2023-27500	8.1	1%	Mar 14	An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files Affected: 700; 701; 702; 731; 740; 750; +7 more
CVE-2020-26832	7.6	2%	Dec 9	SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape… Affected: 2011_1_620; 2011_1_640; 2011_1_700; 2011_1_710; 2011_1_730; 2011_1_731; +2 more
CVE-2023-40308	7.5	1%	Sep 12	SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes… Affected: 7.22ext; kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; +11 more
CVE-2022-22540	7.5	1%	Feb 9	SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to execute crafted database queries, that… Affected: 700; 701; 702; 731; 740; 750; +7 more
CVE-2021-38181	7.5	1%	Oct 12	SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a… Affected: 700; 701; 702; 730; 731; 740; +7 more
CVE-2021-33677	7.5	1%	Jul 14	SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure Affected: 700; 702; 730; 731; 740; 750; +2 more
CVE-2021-21446	7.5	1%	Jan 12	SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or… Affected: 740; 750; 751; 752; 753; 754; +1 more
CVE-2020-6240	7.5	1%	May 12	SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users… Affected: 700; 710; 730; 731; 750; 752; +3 more
CVE-2023-35874	7.4	0%	Jul 11	SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53,… Affected: kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.81; kernel_7.85; +8 more
CVE-2023-26459	7.4	0%	Mar 14	Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker… Affected: 700; 701; 702; 731; 740; 750; +8 more