CVE-2022-29610: SAP NetWeaver Application Server Abap

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could result in Stored Cross-Site Scripting (XSS) attack.

Affected products

• SAP NetWeaver Application Server Abap: version 753 only; version 754 only; version 755 only; version 756 only

Published 2022-05-11. Last modified 2026-06-17.