Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
402,605CVE records
3,007Published, last 7 days
1,734In CISA KEV
1,537Critical, last 30 days
5,599Analysed
09:17 UTCLast NVD sync
Filters Show:
102 results. Sap Netweaver.
Page 1 of 6| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-23685 | Medium | 4.4 |  Sap Netweaver | Deserialization of untrusted data | - | - | 0.13% | Feb 10, 2026 |
| CVE-2025-42968 | Medium | 4.3 | Sap Netweaver | Missing authorization | - | - | 0.26% | Jul 8, 2025 |
| CVE-2025-42999 | Critical | 9.1 | Sap Netweaver | Deserialization of untrusted data | Listed · RW | Confirmed | 14% | May 13, 2025 |
| CVE-2025-31324 | Critical | 9.8 | Sap Netweaver | Unrestricted file upload | Listed · RW | Confirmed | 99% | Apr 24, 2025 |
| CVE-2024-27898 | Medium | 5.3 | Sap Netweaver | Server-side request forgery (SSRF) | - | - | 0.45% | Apr 9, 2024 |
| CVE-2024-25644 | Medium | 5.3 | Sap Netweaver | Incorrect permission assignment | - | - | 0.41% | Mar 12, 2024 |
| CVE-2024-22124 | High | 7.5 | Sap Netweaver | CWE-497 | - | - | 0.33% | Jan 9, 2024 |
| CVE-2023-41367 | Medium | 5.3 | Sap Netweaver | Missing authentication for critica | - | - | 0.55% | Sep 12, 2023 |
| CVE-2023-36922 | High | 8.8 | Sap Netweaver | OS command injection | - | - | 0.85% | Jul 11, 2023 |
| CVE-2023-33985 | Medium | 6.1 | Sap Netweaver | Cross-site scripting | - | - | 0.51% | Jun 13, 2023 |
| CVE-2023-33984 | Medium | 5.4 | Sap Netweaver | Cross-site scripting | - | - | 0.40% | Jun 13, 2023 |
| CVE-2023-32114 | Low | 2.7 | Sap Netweaver | Incorrect permission assignment | - | - | 0.60% | Jun 13, 2023 |
| CVE-2023-29186 | Medium | 6.5 | Sap Netweaver | Path traversal | - | - | 23% | Apr 11, 2023 |
| CVE-2023-27499 | Medium | 6.1 | Sap Netweaver +1 | Cross-site scripting | - | - | 0.45% | Apr 11, 2023 |
| CVE-2023-0021 | Medium | 6.1 | Sap Netweaver | Cross-site scripting | - | - | 0.46% | Mar 14, 2023 |
| CVE-2022-28217 | Medium | 6.5 | Sap Netweaver | Server-side request forgery (SSRF) | - | - | 0.74% | Jun 13, 2022 |
| CVE-2022-28773 | High | 7.5 | Sap Netweaver +1 | CWE-674 | - | - | 1.5% | Apr 12, 2022 |
| CVE-2022-28772 | High | 7.5 | Sap Netweaver +1 | Stack-based buffer overflow | - | - | 1.4% | Apr 12, 2022 |
| CVE-2022-22534 | Medium | 6.1 | Sap Netweaver | Cross-site scripting | - | - | 0.84% | Feb 9, 2022 |
| CVE-2021-38183 | Medium | 6.1 | Sap Netweaver | Cross-site scripting | - | - | 0.75% | Oct 12, 2021 |
