Login Request a demo
NE
Product
NetWeaver
by SAP · last CVE Feb 10, 2026
On CISA KEVExploited in the wildRansomware-linked
109
CVEs
10
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities109In the news0Timeline
Severity mix
Critical 11High 21Medium 27Low 2
Severity
All severities109Critical11High21Medium27Low2
Exploitation
On CISA KEV10Exploited in the wild10
Watch

Add NetWeaver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6287
In wildKEV
10.0
95%
Jul 14
SAP NetWeaver Missing Authentication for Critical Function Vulnerability
Affected: All versions, or not specified
CVE-2010-5326
In wildKEV
10.0
18%
May 13
SAP NetWeaver Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2025-31324
RansomwareIn wildKEV
9.8
99%
Apr 24
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
Affected: 7.50
CVE-2016-2386
In wildKEV
9.8
72%
Feb 16
SAP NetWeaver SQL Injection Vulnerability
Affected: All versions, or not specified
CVE-2025-42999
RansomwareIn wildKEV
9.1
13%
May 13
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
Affected: 7.5
CVE-2021-38163
In wildKEV
8.8
37%
Sep 14
SAP NetWeaver Unrestricted File Upload Vulnerability
Affected: 7.30; 7.31; 7.40; 7.50
CVE-2017-12637
In wildKEV
7.5
95%
Aug 7
SAP NetWeaver Directory Traversal Vulnerability
Affected: All versions, or not specified
CVE-2016-3976
In wildKEV
7.5
47%
Apr 7
SAP NetWeaver Directory Traversal Vulnerability
Affected: All versions, or not specified
CVE-2016-9563
In wildKEV
6.5
24%
Nov 23
SAP NetWeaver XML External Entity (XXE) Vulnerability
Affected: All versions, or not specified
CVE-2016-2388
In wildKEV
5.3
52%
Feb 16
SAP NetWeaver Information Disclosure Vulnerability
Affected: All versions, or not specified
Showing 10