NA
Product
Netweaver Application Server Java
by Sap · last CVE Apr 14, 2026
On CISA KEVExploited in the wild
69
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 20Medium 37Low 1
Watch

Add Netweaver Application Server Java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23686
3.4
0%
Feb 10
Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the…
Affected: 7.50
Showing 1