SB
Product
Sap Basis
18
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 12Low 0
Watch
Add Sap Basis to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-34687 | 9.0 | May 14 | SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability Affected: 700; 701; 702; 731; 740; 750; +10 more |
| CVE-2026-23687 | 8.8 | Feb 10 | XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform Affected: 700; 701; 702; 731; 740; 750; +12 more |
| CVE-2025-0066 | 8.8 | Jan 14 | Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access… Affected: 700; 701; 702; 731; 740; 750; +11 more |
| CVE-2025-0063 | 8.8 | Jan 14 | SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules Affected: 700; 701; 702; 731; 740; 750; +8 more |
| CVE-2025-23193 | 7.5 | Feb 11 | SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user,… Affected: 700; 701; 702; 731; 740; 750; +8 more |
| CVE-2016-4551 | 7.5 | Oct 5 | The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via… Affected: 7.00 |
| CVE-2026-0484 | 6.5 | Feb 10 | Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA Affected: 700; 701; 702; 731; 740; 750; +9 more |
| CVE-2025-0058 | 6.5 | Jan 14 | In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information… Affected: 753; 754; 755; 756; 757; 758; +3 more |
| CVE-2025-42956 | 6.1 | Jul 8 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available Affected: 700; 701; 702; 731; 740; 750; +9 more |
| CVE-2025-42936 | 5.4 | Aug 12 | The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated… Affected: 700; 701; 702; 731; 740; 750; +9 more |
| CVE-2025-0053 | 5.3 | Jan 14 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information Affected: 700; 701; 702; 731; 740; 750; +7 more |
| CVE-2024-37180 | 5.3 | Jul 9 | Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization… Affected: 700; 701; 702; 731; 740; 750; +8 more |
| CVE-2026-24312 | 5.2 | Feb 10 | Missing authorization check in SAP Business Workflow Affected: 752; 753; 754; 755; 756; 757; +2 more |
| CVE-2024-34689 | 5.0 | Jul 9 | WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests Affected: 700; 701; 702; 731; 740; 750; +8 more |
| CVE-2024-39599 | 4.7 | Jul 9 | Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a… Affected: 700; 701; 702; 731; 740; 750; +10 more |
| CVE-2025-42918 | 4.3 | Sep 9 | SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauthorized read access to profile parameters Affected: 700; 701; 702; 731; 740; 750; +9 more |
| CVE-2025-42911 | 4.3 | Sep 9 | SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and… Affected: 700; 701; 702; 731; 740; 750; +9 more |
| CVE-2025-42986 | 4.3 | Jul 8 | Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call (RFC),… Affected: 700; 701; 702; 731; 740; 750; +4 more |
Showing 18