GCVE - cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:7.5:*:*:*:*:*:*:*

part: a version: 7.5 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Netweaver (`27ebb32b-037e-5ce8-844e-70d059f1f917`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-42999`	vulnerable	2026-06-08 07:25:08.527014	Insecure Deserialization in SAP NetWeaver (Visual Composer development server) CRITICAL (9.1) SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Published: 2025-05-13T00:17:43.710Z Updated: 2026-02-26T18:28:37.085Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3604119 https://url.sap/sapsecuritypatchday	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27898`	vulnerable	2026-06-08 06:33:24.978102	Server-Side Request Forgery in SAP NetWeaver MEDIUM (5.3) SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. Thus, having a low impact on confidentiality. Published: 2024-04-09T00:52:54.390Z Updated: 2024-08-21T15:07:15.427Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3425188 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-25644`	vulnerable	2026-06-08 06:31:23.658771	Information Disclosure vulnerability in NetWeaver (WSRM) MEDIUM (5.3) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application. Published: 2024-03-12T00:33:44.473Z Updated: 2024-09-28T22:24:11.195Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3425682 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0248`	vulnerable	2026-06-08 05:12:19.510447	Details available Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted. Published: 2019-01-08T20:00:00.000Z Updated: 2024-08-04T17:44:16.209Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106471 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 https://launchpad.support.sap.com/#/notes/2723142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10311`	vulnerable	2026-06-08 05:07:17.752968	Details available Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238. Published: 2017-04-10T15:00:00.000Z Updated: 2024-08-06T03:14:42.973Z Open on db.gcve.eu Reference links https://erpscan.io/advisories/erpscan-16-030-sap-netweaver-sapstartsrv-stack-based-buffer-overflow/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.