[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2A0hz9YoE37xBLJvqbiJVLeop9jKhjfkOnXrcLHuF98":3,"g5a-family:sap\u002Fnetweaver":359,"g5a-ex:sap\u002Fnetweaver@*":390},{"success":4,"data":5},true,{"product":6,"versions":183,"topVulnerabilitiesByEpss":261,"kevVulnerabilities":324,"seoMetadata":338,"meta":357},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":182},"sap","netweaver",77,103,3,"2025-07-08",[14,18,21,24,26,28,30,32,34,36,38,40,43,46,48,51,53,56,58,60,62,64,67,69,71,73,76,78,81,84,86,89,91,93,95,97,99,101,103,105,107,109,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"2004s",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"3.0",1,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"4.0",4,{"version":25,"cve_count":20,"kev_count":16,"has_kev":17},"600",{"version":27,"cve_count":20,"kev_count":16,"has_kev":17},"602",{"version":29,"cve_count":20,"kev_count":16,"has_kev":17},"603",{"version":31,"cve_count":20,"kev_count":16,"has_kev":17},"604",{"version":33,"cve_count":20,"kev_count":16,"has_kev":17},"605",{"version":35,"cve_count":20,"kev_count":16,"has_kev":17},"606",{"version":37,"cve_count":20,"kev_count":16,"has_kev":17},"617",{"version":39,"cve_count":20,"kev_count":16,"has_kev":17},"618",{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"6.4",5,{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},"7.0",25,{"version":47,"cve_count":23,"kev_count":16,"has_kev":17},"700",{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},"7.01",8,{"version":52,"cve_count":23,"kev_count":16,"has_kev":17},"701",{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},"7.02",11,{"version":57,"cve_count":42,"kev_count":16,"has_kev":17},"702",{"version":59,"cve_count":42,"kev_count":16,"has_kev":17},"7.03",{"version":61,"cve_count":20,"kev_count":16,"has_kev":17},"707",{"version":63,"cve_count":20,"kev_count":16,"has_kev":17},"7.1",{"version":65,"cve_count":66,"kev_count":16,"has_kev":17},"7.10",10,{"version":68,"cve_count":20,"kev_count":16,"has_kev":17},"710",{"version":70,"cve_count":23,"kev_count":16,"has_kev":17},"7.11",{"version":72,"cve_count":20,"kev_count":16,"has_kev":17},"7.2",{"version":74,"cve_count":75,"kev_count":16,"has_kev":17},"7.20",9,{"version":77,"cve_count":11,"kev_count":16,"has_kev":17},"7.22ext",{"version":79,"cve_count":80,"kev_count":16,"has_kev":17},"7.3",2,{"version":82,"cve_count":83,"kev_count":20,"has_kev":4},"7.30",22,{"version":85,"cve_count":20,"kev_count":16,"has_kev":17},"730",{"version":87,"cve_count":88,"kev_count":20,"has_kev":4},"7.31",12,{"version":90,"cve_count":23,"kev_count":16,"has_kev":17},"731",{"version":92,"cve_count":20,"kev_count":16,"has_kev":17},"737",{"version":94,"cve_count":11,"kev_count":16,"has_kev":17},"7.4",{"version":96,"cve_count":45,"kev_count":20,"has_kev":4},"7.40",{"version":98,"cve_count":23,"kev_count":16,"has_kev":17},"740",{"version":100,"cve_count":20,"kev_count":16,"has_kev":17},"7400.12.21.30308",{"version":102,"cve_count":20,"kev_count":16,"has_kev":17},"7.41",{"version":104,"cve_count":20,"kev_count":16,"has_kev":17},"747",{"version":106,"cve_count":80,"kev_count":16,"has_kev":17},"7.49",{"version":108,"cve_count":23,"kev_count":20,"has_kev":4},"7.5",{"version":110,"cve_count":111,"kev_count":80,"has_kev":4},"7.50",14,{"version":113,"cve_count":23,"kev_count":16,"has_kev":17},"750",{"version":115,"cve_count":20,"kev_count":16,"has_kev":17},"7.51",{"version":117,"cve_count":11,"kev_count":16,"has_kev":17},"751",{"version":119,"cve_count":20,"kev_count":16,"has_kev":17},"7.52",{"version":121,"cve_count":11,"kev_count":16,"has_kev":17},"752",{"version":123,"cve_count":11,"kev_count":16,"has_kev":17},"7.53",{"version":125,"cve_count":11,"kev_count":16,"has_kev":17},"753",{"version":127,"cve_count":11,"kev_count":16,"has_kev":17},"754",{"version":129,"cve_count":11,"kev_count":16,"has_kev":17},"755",{"version":131,"cve_count":11,"kev_count":16,"has_kev":17},"756",{"version":133,"cve_count":11,"kev_count":16,"has_kev":17},"757",{"version":135,"cve_count":80,"kev_count":16,"has_kev":17},"7.77",{"version":137,"cve_count":80,"kev_count":16,"has_kev":17},"7.81",{"version":139,"cve_count":80,"kev_count":16,"has_kev":17},"7.85",{"version":141,"cve_count":80,"kev_count":16,"has_kev":17},"7.86",{"version":143,"cve_count":20,"kev_count":16,"has_kev":17},"800",{"version":145,"cve_count":20,"kev_count":16,"has_kev":17},"802",{"version":147,"cve_count":20,"kev_count":16,"has_kev":17},"803",{"version":149,"cve_count":20,"kev_count":16,"has_kev":17},"804",{"version":151,"cve_count":20,"kev_count":16,"has_kev":17},"805",{"version":153,"cve_count":20,"kev_count":16,"has_kev":17},"806",{"version":155,"cve_count":20,"kev_count":16,"has_kev":17},"807",{"version":157,"cve_count":20,"kev_count":16,"has_kev":17},"916",{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},"application_server_java",{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},"kernel_7.22",{"version":163,"cve_count":20,"kev_count":16,"has_kev":17},"kernel_7.53",{"version":165,"cve_count":20,"kev_count":16,"has_kev":17},"kernel_7.54",{"version":167,"cve_count":11,"kev_count":16,"has_kev":17},"krnl64nuc_7.22",{"version":169,"cve_count":20,"kev_count":16,"has_kev":17},"krnl64nuc_7.22ext",{"version":171,"cve_count":80,"kev_count":16,"has_kev":17},"krnl64uc_7.22",{"version":173,"cve_count":20,"kev_count":16,"has_kev":17},"krnl64uc_7.22ext",{"version":175,"cve_count":20,"kev_count":16,"has_kev":17},"krnl64uc_7.53",{"version":177,"cve_count":20,"kev_count":16,"has_kev":17},"webdisp_7.22ext",{"version":179,"cve_count":20,"kev_count":16,"has_kev":17},"webdisp_7.53",{"version":181,"cve_count":20,"kev_count":16,"has_kev":17},"webdisp_7.54","Netweaver by Sap is a technology product with 77 tracked versions and 103 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":20,"kev_count":16,"has_kev":17},{"version":27,"cve_count":20,"kev_count":16,"has_kev":17},{"version":29,"cve_count":20,"kev_count":16,"has_kev":17},{"version":31,"cve_count":20,"kev_count":16,"has_kev":17},{"version":33,"cve_count":20,"kev_count":16,"has_kev":17},{"version":35,"cve_count":20,"kev_count":16,"has_kev":17},{"version":37,"cve_count":20,"kev_count":16,"has_kev":17},{"version":39,"cve_count":20,"kev_count":16,"has_kev":17},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},{"version":47,"cve_count":23,"kev_count":16,"has_kev":17},{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},{"version":52,"cve_count":23,"kev_count":16,"has_kev":17},{"version":54,"cve_count":55,"kev_count":16,"has_kev":17},{"version":57,"cve_count":42,"kev_count":16,"has_kev":17},{"version":59,"cve_count":42,"kev_count":16,"has_kev":17},{"version":61,"cve_count":20,"kev_count":16,"has_kev":17},{"version":63,"cve_count":20,"kev_count":16,"has_kev":17},{"version":65,"cve_count":66,"kev_count":16,"has_kev":17},{"version":68,"cve_count":20,"kev_count":16,"has_kev":17},{"version":70,"cve_count":23,"kev_count":16,"has_kev":17},{"version":72,"cve_count":20,"kev_count":16,"has_kev":17},{"version":74,"cve_count":75,"kev_count":16,"has_kev":17},{"version":77,"cve_count":11,"kev_count":16,"has_kev":17},{"version":79,"cve_count":80,"kev_count":16,"has_kev":17},{"version":82,"cve_count":83,"kev_count":20,"has_kev":4},{"version":85,"cve_count":20,"kev_count":16,"has_kev":17},{"version":87,"cve_count":88,"kev_count":20,"has_kev":4},{"version":90,"cve_count":23,"kev_count":16,"has_kev":17},{"version":92,"cve_count":20,"kev_count":16,"has_kev":17},{"version":94,"cve_count":11,"kev_count":16,"has_kev":17},{"version":96,"cve_count":45,"kev_count":20,"has_kev":4},{"version":98,"cve_count":23,"kev_count":16,"has_kev":17},{"version":100,"cve_count":20,"kev_count":16,"has_kev":17},{"version":102,"cve_count":20,"kev_count":16,"has_kev":17},{"version":104,"cve_count":20,"kev_count":16,"has_kev":17},{"version":106,"cve_count":80,"kev_count":16,"has_kev":17},{"version":108,"cve_count":23,"kev_count":20,"has_kev":4},{"version":110,"cve_count":111,"kev_count":80,"has_kev":4},{"version":113,"cve_count":23,"kev_count":16,"has_kev":17},{"version":115,"cve_count":20,"kev_count":16,"has_kev":17},{"version":117,"cve_count":11,"kev_count":16,"has_kev":17},{"version":119,"cve_count":20,"kev_count":16,"has_kev":17},{"version":121,"cve_count":11,"kev_count":16,"has_kev":17},{"version":123,"cve_count":11,"kev_count":16,"has_kev":17},{"version":125,"cve_count":11,"kev_count":16,"has_kev":17},{"version":127,"cve_count":11,"kev_count":16,"has_kev":17},{"version":129,"cve_count":11,"kev_count":16,"has_kev":17},{"version":131,"cve_count":11,"kev_count":16,"has_kev":17},{"version":133,"cve_count":11,"kev_count":16,"has_kev":17},{"version":135,"cve_count":80,"kev_count":16,"has_kev":17},{"version":137,"cve_count":80,"kev_count":16,"has_kev":17},{"version":139,"cve_count":80,"kev_count":16,"has_kev":17},{"version":141,"cve_count":80,"kev_count":16,"has_kev":17},{"version":143,"cve_count":20,"kev_count":16,"has_kev":17},{"version":145,"cve_count":20,"kev_count":16,"has_kev":17},{"version":147,"cve_count":20,"kev_count":16,"has_kev":17},{"version":149,"cve_count":20,"kev_count":16,"has_kev":17},{"version":151,"cve_count":20,"kev_count":16,"has_kev":17},{"version":153,"cve_count":20,"kev_count":16,"has_kev":17},{"version":155,"cve_count":20,"kev_count":16,"has_kev":17},{"version":157,"cve_count":20,"kev_count":16,"has_kev":17},{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},{"version":163,"cve_count":20,"kev_count":16,"has_kev":17},{"version":165,"cve_count":20,"kev_count":16,"has_kev":17},{"version":167,"cve_count":11,"kev_count":16,"has_kev":17},{"version":169,"cve_count":20,"kev_count":16,"has_kev":17},{"version":171,"cve_count":80,"kev_count":16,"has_kev":17},{"version":173,"cve_count":20,"kev_count":16,"has_kev":17},{"version":175,"cve_count":20,"kev_count":16,"has_kev":17},{"version":177,"cve_count":20,"kev_count":16,"has_kev":17},{"version":179,"cve_count":20,"kev_count":16,"has_kev":17},{"version":181,"cve_count":20,"kev_count":16,"has_kev":17},[262,269,276,284,290,296,303,308,313,319],{"cveId":263,"description":264,"publishedDate":265,"cvssScore":66,"cvssVersion":266,"severity":267,"isKev":4,"epssScore":268},"CVE-2025-31324","SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.","2025-04-24","v3.1","Critical",0.99486,{"cveId":270,"description":271,"publishedDate":272,"cvssScore":273,"cvssVersion":274,"severity":267,"isKev":17,"epssScore":275},"CVE-2012-2611","The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet.","2012-05-15",9.3,"v2",0.44284,{"cveId":277,"description":278,"publishedDate":279,"cvssScore":280,"cvssVersion":281,"severity":282,"isKev":17,"epssScore":283},"CVE-2016-2389","Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to \u002FCatalog, aka SAP Security Note 2230978.","2016-02-16",7.5,"v3.0","High",0.4145,{"cveId":285,"description":286,"publishedDate":287,"cvssScore":288,"cvssVersion":266,"severity":267,"isKev":4,"epssScore":289},"CVE-2021-38163","SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process. These commands can be used to read or modify any information on the server or shut the server down making it unavailable.\n\n","2021-09-14",9.9,0.36898,{"cveId":291,"description":292,"publishedDate":293,"cvssScore":294,"cvssVersion":266,"severity":267,"isKev":17,"epssScore":295},"CVE-2013-1592","A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and\u002For 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.","2020-01-23",9.8,0.24407,{"cveId":297,"description":298,"publishedDate":299,"cvssScore":300,"cvssVersion":266,"severity":301,"isKev":17,"epssScore":302},"CVE-2023-29186","In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.\n\n","2023-04-11",6.5,"Medium",0.23035,{"cveId":304,"description":305,"publishedDate":306,"cvssScore":42,"cvssVersion":274,"severity":301,"isKev":17,"epssScore":307},"CVE-2013-3319","The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.","2013-08-16",0.20713,{"cveId":309,"description":310,"publishedDate":311,"cvssScore":294,"cvssVersion":281,"severity":267,"isKev":17,"epssScore":312},"CVE-2015-7241","XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.","2017-09-06",0.13467,{"cveId":314,"description":315,"publishedDate":316,"cvssScore":317,"cvssVersion":266,"severity":267,"isKev":4,"epssScore":318},"CVE-2025-42999","SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.","2025-05-13",9.1,0.12743,{"cveId":320,"description":321,"publishedDate":322,"cvssScore":42,"cvssVersion":274,"severity":301,"isKev":17,"epssScore":323},"CVE-2014-0995","The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service (uncontrolled recursion and crash) via a trace level with a wildcard in the Trace Pattern.","2014-11-06",0.10485,[325,330,334],{"cveId":314,"description":315,"publishedDate":316,"cvssScore":317,"severity":267,"isKev":4,"epssScore":318,"cisaVulnName":326,"cisaDateAdded":327,"cisaShortDescription":328,"cisaRequiredAction":329},"SAP NetWeaver Deserialization Vulnerability","2025-05-15","SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":263,"description":264,"publishedDate":265,"cvssScore":66,"severity":267,"isKev":4,"epssScore":268,"cisaVulnName":331,"cisaDateAdded":332,"cisaShortDescription":333,"cisaRequiredAction":329},"SAP NetWeaver Unrestricted File Upload Vulnerability","2025-04-29","SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.",{"cveId":285,"description":286,"publishedDate":287,"cvssScore":288,"severity":267,"isKev":4,"epssScore":289,"cisaVulnName":331,"cisaDateAdded":335,"cisaShortDescription":336,"cisaRequiredAction":337},"2022-06-09","SAP NetWeaver contains a vulnerability that allows unrestricted file upload.","Apply updates per vendor instructions.",{"title":339,"metaDescription":340,"keywords":341,"structuredData":342},"Netweaver by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Netweaver by Sap covering 77 versions with 103 tracked vulnerabilities including 3 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netweaver vulnerabilities, Netweaver security, Netweaver CVE, Sap Netweaver, Netweaver threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Netweaver KEV, Netweaver exploited vulnerabilities",{"@context":343,"@type":344,"name":345,"description":340,"url":346,"manufacturer":347,"applicationCategory":351,"softwareVersion":352,"mainEntity":353},"https:\u002F\u002Fschema.org","SoftwareApplication","Netweaver","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fnetweaver",{"@type":348,"name":349,"url":350},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","77 versions tracked",{"@type":354,"name":355,"description":356,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netweaver Security Vulnerabilities","Security vulnerabilities affecting Netweaver by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":358,"apiVersion":19},"2026-10-18T20:30:06.553Z",[360,363,366,369,371,374,376,378,380,383,386,388],{"product":361,"cves":362},"netweaver_application_server_abap",76,{"product":364,"cves":365},"netweaver_application_server_java",67,{"product":367,"cves":368},"netweaver_process_integration",21,{"product":370,"cves":368},"netweaver_abap",{"product":372,"cves":373},"netweaver_enterprise_portal",20,{"product":375,"cves":88},"netweaver_as_abap",{"product":377,"cves":66},"netweaver_as_abap_business_server_pages",{"product":379,"cves":75},"netweaver_application_server_for_java",{"product":381,"cves":382},"netweaver_as_internet_graphics_server",7,{"product":384,"cves":385},"netweaver_knowledge_management",6,{"product":387,"cves":42},"netweaver_java_application_server",{"product":389,"cves":23},"netweaver_abap_application_server",{"rows":391,"total":11,"capped":17,"failed":16},[392,396,400],{"cveId":314,"name":326,"severity":267,"cvss":317,"added":327,"epss":318,"published":393,"ranges":394,"checked":4,"hits":395,"covers":17},"2025-05-13T01:15:48.44",[108],[],{"cveId":263,"name":331,"severity":267,"cvss":66,"added":332,"epss":268,"published":397,"ranges":398,"checked":4,"hits":399,"covers":17},"2025-04-24T17:15:35.913",[110],[],{"cveId":285,"name":331,"severity":267,"cvss":288,"added":335,"epss":289,"published":401,"ranges":402,"checked":4,"hits":403,"covers":17},"2021-09-14T12:15:10.89",[82,87,96,110],[]]