How many SAP netweaver CVEs are in CISA KEV?

Yes — 3 of SAP netweaver's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of SAP netweaver are affected?

91 distinct SAP netweaver versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SAP netweaver CVEs?

SAP netweaver's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).

How many critical SAP netweaver vulnerabilities are there?

SAP netweaver has 14 critical and 26 high-severity CVEs.

What is the average severity of SAP netweaver CVEs?

The average CVSS base score across SAP netweaver's scored CVEs is 6.4.

SAP netweaver Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: SAP netweaver vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

SAP netweaver Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

SAP netweaver has 108 published CVE records since 2008, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting SAP netweaver, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include internet explorer.

Severity and exploitation

How the CVSS severity of SAP netweaver's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical14

High26

Medium66

Low2

In CISA’s Known Exploited Vulnerabilities catalog

3 of SAP netweaver's CVEs are confirmed exploited in the wild.

Public exploits

25 of SAP netweaver's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every SAP netweaver version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

7541 CVE
7551 CVE
7561 CVE
7571 CVE
7581 CVE

Version ranges

7.0 <= v <= 7.025 CVEs
7.40 <= v <= 7.4025 CVEs
7.30 <= v <= 7.3022 CVEs
7.50 <= v <= 7.5015 CVEs
7.31 <= v <= 7.3112 CVEs
7.02 <= v <= 7.0211 CVEs

Common weakness types

The CWE weakness categories most often found in SAP netweaver CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many SAP netweaver CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other SAP products

Browse vulnerabilities for other products by SAP.

3d visual enterprise viewer131 CVEs SAP 3D Visual Enterprise Viewer127 CVEs netweaver application server abap86 CVEs businessobjects business intelligence platform74 CVEs netweaver application server java70 CVEs businessobjects business intelligence45 CVEs hana38 CVEs

Frequently asked questions

Common questions about SAP netweaver vulnerabilities.

How many CVEs does SAP netweaver have?: SAP netweaver has 108 published CVE records since 2008.
How many SAP netweaver CVEs are in CISA KEV?: Yes — 3 of SAP netweaver's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for SAP netweaver vulnerabilities?: Yes — 25 of SAP netweaver's CVEs have a known public exploit.
Which versions of SAP netweaver are affected?: 91 distinct SAP netweaver versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SAP netweaver CVEs?: SAP netweaver's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).
How many critical SAP netweaver vulnerabilities are there?: SAP netweaver has 14 critical and 26 high-severity CVEs.
What is the average severity of SAP netweaver CVEs?: The average CVSS base score across SAP netweaver's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SAP netweaver vulnerabilities

Monitor new SAP netweaver vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing