SAP SE SAP NetWeaver And Abap Platform vulnerabilities

3 CVEs affecting SAP SE SAP NetWeaver And Abap Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76963, published 2026-09-08.

More from SAP SE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-34265, published 2026-08-11. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially…
• CVE-2024-47593, published 2024-11-12. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web…
• CVE-2026-76963, published 2026-09-08. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration…