ZeusQA
Start free

Known exploited vulnerabilities

SAP vulnerabilities attackers have used

Every SAP vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 14 SAP vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 3 used in ransomware campaigns. The most recent is CVE-2025-42999, added May 15, 2025. NetWeaver has the most entries (10).

In KEV, all time
14
Added, last 12 months
0
Used in ransomware
3
New CVEs this week
0

By product

NetWeaver (10), Commerce Cloud (1), Customer Relationship Management (CRM) (1), Multiple Products (1), Solution Manager (1).

Every SAP entry in CISA KEV

  1. CVE-2025-42999

    RansomwareAdded · due

    SAP NetWeaver Deserialization Vulnerability

    SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or…

  2. CVE-2025-31324

    RansomwareAdded · due

    SAP NetWeaver Unrestricted File Upload Vulnerability

    SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

  3. CVE-2017-12637

    Added · due

    SAP NetWeaver Directory Traversal Vulnerability

    SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.

  4. CVE-2019-0344

    Added · due

    SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

    SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

  5. CVE-2022-22536

    Added · due

    SAP Multiple Products HTTP Request Smuggling Vulnerability

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary…

  6. CVE-2021-38163

    Added · due

    SAP NetWeaver Unrestricted File Upload Vulnerability

    SAP NetWeaver contains a vulnerability that allows unrestricted file upload.

  7. CVE-2016-2388

    Added · due

    SAP NetWeaver Information Disclosure Vulnerability

    The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.

  8. CVE-2016-2386

    Added · due

    SAP NetWeaver SQL Injection Vulnerability

    SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  9. CVE-2020-6287

    Added · due

    SAP NetWeaver Missing Authentication for Critical Function Vulnerability

    SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users.

  10. CVE-2020-6207

    Added · due

    SAP Solution Manager Missing Authentication for Critical Function Vulnerability

    SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager.

  11. CVE-2018-2380

    RansomwareAdded · due

    SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

    SAP Customer Relationship Management (CRM) contains a path traversal vulnerability that allows an attacker to exploit insufficient validation of path information provided by users.

  12. CVE-2016-9563

    Added · due

    SAP NetWeaver XML External Entity (XXE) Vulnerability

    SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated users to conduct XML External Entity (XXE) attacks.

  13. CVE-2016-3976

    Added · due

    SAP NetWeaver Directory Traversal Vulnerability

    SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownloadServlet. This allows remote attackers to read files.

  14. CVE-2010-5326

    Added · due

    SAP NetWeaver Remote Code Execution Vulnerability

    SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works