What’s Vulnerable › Products

SAP SE SAP NetWeaver Enterprise Portal vulnerabilities

28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your SAP SE SAP NetWeaver Enterprise Portal version is affected

Latest SAP SE SAP NetWeaver Enterprise Portal vulnerabilities

• CVE-2026-89122 — Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1)
• CVE-2026-89118 — Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal (CVSS 5.3)
• CVE-2026-89117 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1)
• CVE-2026-44759 — Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1)
• CVE-2026-0499 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1)
• CVE-2025-42872 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.1)
• CVE-2025-42884 — JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal (CVSS 6.5)
• CVE-2024-47594 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) (CVSS 5.4)
• CVE-2024-44120 — Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (CVSS 4.7)
• CVE-2024-25645 — Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal) (CVSS 5.3)
• CVE-2023-28761 — Missing Authentication check in SAP NetWeaver Enterprise Portal (CVSS 6.5)
• CVE-2023-26461 — XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal) (CVSS 4.9)
• CVE-2022-35298 — (CVSS 6.1)
• CVE-2022-35227 — (CVSS 6.1)
• CVE-2022-35225 — (CVSS 6.1)
• CVE-2022-35172 — (CVSS 6.1)
• CVE-2022-35170 — (CVSS 6.1)
• CVE-2022-32247 — (CVSS 6.1)
• CVE-2022-26105 — (CVSS 6.1)
• CVE-2022-24397 — (CVSS 6.1)
• CVE-2022-24395 — (CVSS 6.1)
• CVE-2021-21489 — (CVSS 4.8)
• CVE-2021-33703 — (CVSS 6.1)
• CVE-2021-33702 — (CVSS 6.1)
• CVE-2020-6323 — (CVSS 6.1)