Login Request a demo
SN
Product
SAP NetWeaver Enterprise Portal
by SAP_SE · last CVE Oct 13, 2026
8
CVEs
0
On KEV
6.5
Max CVSS
3
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 8Low 0
Severity
All severities8Critical0High0Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SAP NetWeaver Enterprise Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-42884
6.5
0%
Nov 11
JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-BASIS 7.50; EP-RUNTIME 7.50
CVE-2026-89122
6.1
0%
Oct 13
Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-RUNTIME 7.50
CVE-2026-89117
6.1
0%
Oct 13
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-ADMIN 7.50
CVE-2026-44759
6.1
0%
Jul 14
Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-RUNTIME 7.50
CVE-2026-0499
6.1
0%
Jan 13
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-RUNTIME 7.50
CVE-2025-42872
6.1
0%
Dec 9
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-RUNTIME 7.50
CVE-2026-89118
5.3
0%
Oct 13
Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal
Affected: EP-RUNTIME 7.50
CVE-2024-44120
4.7
0%
Sep 10
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
Affected: 7.50
Showing 8