Class familySAP · NetWeaver
SAP NetWeaver path traversal flaws, 2016–2021
3 NetWeaver CVEs with CWE-22 weaknesses, 7 Apr 2016 to 14 Sep 2021. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2016’16
1 2017’17
2018’18
2019’19
2020’20
1 2021’21
In CISA KEVNot in KEV
20161 CVE, 1 in KEV
20171 CVE, 1 in KEV
20211 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-3976KEV | 7 Apr 2016 | SAP NetWeaver Directory Traversal Vulnerability | Grouped by weakness | 68.0 |
| CVE-2017-12637KEV | 7 Aug 2017 | SAP NetWeaver Directory Traversal Vulnerability | Grouped by weakness | 68.2 |
| CVE-2021-38163KEV | 14 Sep 2021 | SAP NetWeaver Unrestricted File Upload Vulnerability | Grouped by weakness | 68.9 |