SAP
SAP Netweaver Application Server Java: vulnerabilidades y CVE
SAP Netweaver Application Server Java tiene 79 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 12 son críticas y 7 figuran en el catálogo de explotación activa de CISA.
CVE79
Últimos 12 meses7
Críticas12
Explotadas activamente7
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-12637 | Alta (7.5) | 95% | ⚠ Explotación activa | 7 ago 2017 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query… |
| CVE-2016-2386 | Crítica (9.8) | 72% | ⚠ Explotación activa | 16 feb 2016 | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079. |
| CVE-2016-2388 | Media (5.3) | 52% | ⚠ Explotación activa | 16 feb 2016 | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846. |
| CVE-2016-9563 | Media (6.5) | 24% | ⚠ Explotación activa | 23 nov 2016 | BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909. |
| CVE-2016-3976 | Alta (7.5) | 47% | ⚠ Explotación activa | 7 abr 2016 | Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet, aka SAP… |
| CVE-2020-6287 | Crítica (10) | 95% | ⚠ Explotación activa | 14 jul 2020 | SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to… |
| CVE-2010-5326 | Crítica (10) | 18% | ⚠ Explotación activa | 13 may 2016 | The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-58235 | Media (6.3) | 0.29% | — | 11 ago 2026 | SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged… |
| CVE-2026-44752 | Alta (8.2) | 0.36% | — | 14 jul 2026 | SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. When a victim accesses such a URL, the script executes in the user's browser, allowing the… |
| CVE-2026-40128 | Crítica (9) | 0.63% | — | 9 jun 2026 | SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the… |
| CVE-2026-27674 | Media (6.1) | 0.29% | — | 14 abr 2026 | Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interpreted by the application and causes it to reference… |
| CVE-2026-23686 | Baja (3.4) | 0.17% | — | 10 feb 2026 | Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the… |
| CVE-2026-0510 | Baja (3) | 0.14% | — | 13 ene 2026 | The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with… |
| CVE-2025-42919 | Media (5.3) | 0.46% | — | 11 nov 2025 | Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by… |
| CVE-2025-42926 | Media (5.3) | 0.30% | — | 9 sept 2025 | SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker… |
| CVE-2025-42978 | Baja (3.5) | 0.14% | — | 8 jul 2025 | The widely used component that establishes outbound TLS connections in SAP NetWeaver Application Server Java does not reliably match the hostname that is used for the connection against the wildcard hostname defined in… |
| CVE-2025-27431 | Media (5.4) | 0.22% | — | 11 mar 2025 | User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS). This could enable an attacker to inject malicious payload that gets stored and executed when a… |
| CVE-2025-24869 | Media (4.3) | 0.26% | — | 11 feb 2025 | SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be… |
| CVE-2025-0054 | Media (5.4) | 0.27% | — | 11 feb 2025 | SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript… |
| CVE-2025-0067 | Media (6.3) | 0.26% | — | 14 ene 2025 | Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role can create JCo connection entries, which are used for remote function calls… |
| CVE-2024-34688 | Alta (7.5) | 0.54% | — | 11 jun 2024 | Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. This can result in… |
| CVE-2024-28164 | Media (5.3) | 0.33% | — | 11 jun 2024 | SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be restricted causing low impact on confidentiality of the… |
| CVE-2024-22127 | Crítica (9.1) | 1.6% | — | 12 mar 2024 | SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This… |
| CVE-2024-24743 | Alta (7.5) | 0.52% | — | 13 feb 2024 | SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access… |
| CVE-2024-22126 | Alta (8.8) | 0.52% | — | 13 feb 2024 | The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site… |
| CVE-2023-42480 | Media (5.3) | 0.55% | — | 14 nov 2023 | The unauthenticated attacker in NetWeaver AS Java Logon application - version 7.50, can brute force the login functionality to identify the legitimate user ids. This will have an impact on confidentiality but there is… |
| CVE-2023-42477 | Media (6.5) | 0.41% | — | 10 oct 2023 | SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the… |
| CVE-2023-40309 | Crítica (9.8) | 0.88% | — | 12 sept 2023 | SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the… |
| CVE-2023-40308 | Alta (7.5) | 0.75% | — | 12 sept 2023 | SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it… |
| CVE-2023-24526 | Media (5.3) | 0.58% | — | 14 mar 2023 | SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure… |
| CVE-2022-41262 | Media (6.1) | 0.45% | — | 12 dic 2022 | Due to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7.50, allows an unauthenticated attacker to inject a script into a web request header. On successful exploitation, an… |
| CVE-2022-26103 | Media (5.3) | 0.77% | — | 10 mar 2022 | Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks. |
| CVE-2022-22533 | Alta (7.5) | 1.8% | — | 9 feb 2022 | Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP… |
| CVE-2022-22532 | Crítica (9.8) | 2.4% | — | 9 feb 2022 | In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request… |
| CVE-2021-37535 | Crítica (9.8) | 1.1% | — | 14 sept 2021 | SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges. |
| CVE-2021-33689 | Media (4.3) | 0.54% | — | 14 jul 2021 | When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is created. Therefore, security audit log… |
| CVE-2021-33687 | Media (4.9) | 1.6% | — | 14 jul 2021 | SAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de SAP
3D Visual Enterprise Viewer · 131Netweaver · 119Netweaver Application Server Abap · 110Businessobjects Business Intelligence Platform · 80S/4hana · 50Businessobjects Business Intelligence · 46Hana · 39Solution Manager · 37Business ONE · 35Abap Platform · 32Netweaver Enterprise Portal · 29Internet Graphics Server · 28