SAP NetWeaver Enterprise Portal
11 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| October 2026 | 3779985 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |
| October 2026 | 3790401 | Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |
| October 2026 | 3789825 | Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal | Medium | 5.3 |
| July 2026 | 3746678 | Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |
| January 2026 | 3687372 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |
| December 2025 | 3662622 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |
| November 2025 | 3660969 | JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.5 |
| March 2025 | 3561792 | Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) | Medium | 5.3 |
| October 2024 | 3503462 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) | Medium | 5.4 |
| September 2024 | 3498221 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 4.7 |
| June 2023 | 3331627 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal | Medium | 6.1 |