NA
Product
Netweaver Application Server Java
by Sap · last CVE Apr 14, 2026
On CISA KEVExploited in the wild
69
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 20Medium 37Low 1
Watch

Add Netweaver Application Server Java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6287
In wildKEV
10.0
95%
Jul 14
SAP NetWeaver Missing Authentication for Critical Function Vulnerability
Affected: 7.30; 7.31; 7.40; 7.50
CVE-2010-5326
In wildKEV
10.0
18%
May 13
SAP NetWeaver Remote Code Execution Vulnerability
Affected: through 7.30
CVE-2016-2386
In wildKEV
9.8
72%
Feb 16
SAP NetWeaver SQL Injection Vulnerability
Affected: 7.40
Showing 3