sap_netweaver_application_server_for_abap vulnerabilities
CVEs whose affected-version data names the sap_netweaver_application_server_for_abap package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-42953High· 8.1Missing Authorization check in SAP NetWeaver Application Server for ABAP
SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confid…
▾ TwilightSAP_SE · SAP NetWeaver Application Server for ABAPEPSS 0.49%via CVEORG
CVE-2025-42989Critical· 9.6Missing Authorization check in SAP NetWeaver Application Server for ABAP
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of t…
▾ MidnightSAP_SE · SAP NetWeaver Application Server for ABAPEPSS 0.44%via CVEORG