Login Request a demo
NE
Product
NetWeaver
by SAP · last CVE Feb 10, 2026
On CISA KEVExploited in the wildRansomware-linked
109
CVEs
10
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities109In the news0Timeline
Severity mix
Critical 11High 21Medium 27Low 2
Severity
All severities109Critical11High21Medium27Low2
Exploitation
On CISA KEV10Exploited in the wild10
Watch

Add NetWeaver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6287
In wildKEV
10.0
95%
Jul 14
SAP NetWeaver Missing Authentication for Critical Function Vulnerability
Affected: All versions, or not specified
CVE-2010-5326
In wildKEV
10.0
18%
May 13
SAP NetWeaver Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2025-31324
RansomwareIn wildKEV
9.8
99%
Apr 24
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
Affected: 7.50
CVE-2016-2386
In wildKEV
9.8
72%
Feb 16
SAP NetWeaver SQL Injection Vulnerability
Affected: All versions, or not specified
CVE-2025-42999
RansomwareIn wildKEV
9.1
13%
May 13
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
Affected: 7.5
Showing 5