Known Vulnerabilities for Netweaver Portal by Sap
Listed below are 3 of the newest known vulnerabilities associated with "Netweaver Portal" by "Sap".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-89122 json | SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attack... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-89118 json | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical a... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-89117 json | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scri... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-89110 json | SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker w... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2021-33705 json | The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side... | 8.1 - HIGH | 2021-09-15 | 2022-02-02 |
| CVE-2018-2365 json | SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting ... | 6.1 - MEDIUM | 2018-03-01 | 2018-03-23 |
| CVE-2017-11460 json | Not Provided | 2017-07-25 | 2025-04-20 |