Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,573CVE records
2,899Published, last 7 days
1,728In CISA KEV
1,421Critical, last 30 days
5,599Analysed
05:16 UTCLast NVD sync
Filters Show:
69 results. Sap Netweaver Application Server Java.
Page 1 of 4| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-27674 | Medium | 6.1 |  Sap Netweaver Application Server Java | Code injection | — | — | 0.29% | Apr 14, 2026 |
| CVE-2026-23686 | Low | 3.4 | Sap Netweaver Application Server Java | CWE-113 | — | — | 0.17% | Feb 10, 2026 |
| CVE-2025-42926 | Medium | 5.3 | Sap Netweaver Application Server Java | Missing authentication for critica | — | — | 0.30% | Sep 9, 2025 |
| CVE-2024-34688 | High | 7.5 | Sap Netweaver Application Server Java | Uncontrolled resource consumption | — | — | 0.54% | Jun 11, 2024 |
| CVE-2024-28164 | Medium | 5.3 | Sap Netweaver Application Server Java | Information exposure | — | — | 0.33% | Jun 11, 2024 |
| CVE-2024-22127 | Critical | 9.1 | Sap Netweaver Application Server Java | Command injection | — | — | 1.6% | Mar 12, 2024 |
| CVE-2024-24743 | High | 7.5 | Sap Netweaver Application Server Java | XML external entity (XXE) | — | — | 0.52% | Feb 13, 2024 |
| CVE-2024-22126 | Medium | 6.1 | Sap Netweaver Application Server Java | Cross-site scripting | — | — | 0.52% | Feb 13, 2024 |
| CVE-2023-42480 | Medium | 5.3 | Sap Netweaver Application Server Java | Improper restriction of authentica | — | — | 0.55% | Nov 14, 2023 |
| CVE-2023-42477 | Medium | 6.5 | Sap Netweaver Application Server Java | Server-side request forgery (SSRF) | — | — | 0.41% | Oct 10, 2023 |
| CVE-2023-40309 | Critical | 9.8 | Sap Commoncryptolib +8 | Incorrect authorization | — | — | 0.88% | Sep 12, 2023 |
| CVE-2023-40308 | High | 7.5 | Sap Commoncryptolib +8 | Out-of-bounds write | — | — | 0.75% | Sep 12, 2023 |
| CVE-2023-24526 | Medium | 5.3 | Sap Netweaver Application Server Java | Missing authentication for critica | — | — | 0.58% | Mar 14, 2023 |
| CVE-2022-41262 | Medium | 6.1 | Sap Netweaver Application Server Java | Cross-site scripting | — | — | 0.45% | Dec 12, 2022 |
| CVE-2022-26103 | Medium | 5.3 | Sap Netweaver Application Server Java | Missing authorization | — | — | 0.77% | Mar 10, 2022 |
| CVE-2022-22533 | High | 7.5 | Sap Netweaver Application Server Java | Use after free | — | — | 1.8% | Feb 9, 2022 |
| CVE-2022-22532 | Critical | 9.8 | Sap Netweaver Application Server Java | HTTP request smuggling | — | — | 2.4% | Feb 9, 2022 |
| CVE-2021-37535 | Critical | 9.8 | Sap Netweaver Application Server Java | Missing authorization | — | — | 1.1% | Sep 14, 2021 |
| CVE-2021-33689 | Medium | 4.3 | Sap Netweaver Application Server Java | CWE-778 | — | — | 0.54% | Jul 14, 2021 |
| CVE-2021-33687 | Medium | 4.9 | Sap Netweaver Application Server Java | Information exposure | — | — | 1.6% | Jul 14, 2021 |
