SAP NetWeaver AS ABAP / ABAP Platform
自 2023 年 1 月以来共 87 条安全说明。
优先级依据 CVSS 推算，并非 SAP 的优先级：CVSS 9.0 及以上为严重，7.0 及以上为高，4.0 及以上为中，低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me（需要 SAP 登录）。
| 补丁日 | 编号 | 标题 | 优先级（依据 CVSS 推算，并非 SAP 的优先级） | CVSS |
|---|---|---|---|---|
| 2026年10月 | 3671819 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) | 中 | 5.4 |
| 2026年9月 | 3757002 | Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 高 | 7.7 |
| 2026年9月 | 3772838 | Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform | 中 | 4.3 |
| 2026年8月 | 3714806 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | 严重 | 9.8 |
| 2026年8月 | 3721424 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP | 中 | 6.3 |
| 2026年8月 | 3745182 | OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | 中 | 5.5 |
| 2026年8月 | 3752864 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) | 中 | 4.2 |
| 2026年7月 | 3747367 | Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP | 严重 | 9.9 |
| 2026年7月 | 3754659 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) | 中 | 4.7 |
| 2026年7月 | 3413033 | Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 4.3 |
| 2026年6月 | 3746332 | XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform | 严重 | 9.9 |
| 2026年6月 | 3717897 | Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | 严重 | 9.8 |
| 2026年6月 | 3735546 | Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform | 高 | 7.1 |
| 2026年5月 | 3730019 | OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 6.5 |
| 2026年5月 | 3728690 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) | 中 | 4.7 |
| 2026年5月 | 3665042 | CSS Injection vulnerability in SAP NetWeaver Application Server ABAP | 低 | 3.1 |
| 2026年4月 | 3692004 | Open Redirect vulnerability in SAP NetWeaver Application Server ABAP | 中 | 6.1 |
| 2026年3月 | 3689080 | Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP | 中 | 6.4 |
| 2026年3月 | 3703856 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 中 | 6.4 |
| 2026年3月 | 3704740 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 中 | 5.0 |
| 2026年3月 | 3694383 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 低 | 3.5 |
| 2026年2月 | 3674774 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | 严重 | 9.6 |
| 2026年2月 | 3697567 | XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform | 高 | 8.8 |
| 2026年2月 | 3678313 | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) | 低 | 3.1 |
| 2026年1月 | 3688703 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | 高 | 8.1 |
| 2025年11月 | 3643337 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 中 | 4.3 |
| 2025年11月 | 3634053 | Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) | 低 | 2.7 |
| 2025年10月 | 3642021 | Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP | 中 | 5.4 |
| 2025年10月 | 3627308 | Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform | 中 | 5.3 |
| 2025年9月 | 3629325 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform | 中 | 6.1 |
| 2025年9月 | 3623504 | Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) | 中 | 4.3 |
| 2025年8月 | 3611184 | Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) | 高 | 8.1 |
| 2025年8月 | 3585491 | HTML Injection vulnerability in SAP NetWeaver Application Server ABAP | 中 | 6.1 |
| 2025年8月 | 3597355 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP | 中 | 6.1 |
| 2025年8月 | 3629871 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform | 中 | 6.1 |
| 2025年8月 | 3602656 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 中 | 5.4 |
| 2025年8月 | 3601480 | Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) | 中 | 4.1 |
| 2025年7月 | 3600846 | Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 | 高 | 8.1 |
| 2025年7月 | 3623440 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 高 | 8.1 |
| 2025年7月 | 3596987 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 6.1 |
| 2025年7月 | 3617131 | Multiple vulnerabilities in SAP NetWeaver Application Server ABAP | 中 | 6.1 |
| 2025年7月 | 3610322 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 中 | 4.9 |
| 2025年7月 | 3610056 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | 中 | 4.3 |
| 2025年7月 | 3626440 | Missing Authorization check in SAP NetWeaver and ABAP Platform | 中 | 4.3 |
| 2025年6月 | 3600840 | Missing Authorization check in SAP NetWeaver Application Server for ABAP | 严重 | 9.6 |
| 2025年5月 | 3577287 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 6.2 |
| 2025年4月 | 3554667 | Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | 高 | 8.5 |
| 2025年4月 | 3581811 | Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) | 高 | 7.7 |
| 2025年4月 | 3559307 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | 中 | 4.7 |
| 2025年4月 | 3568778 | Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface) | 中 | 4.3 |
| 2025年4月 | 3565944 | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) | 中 | 4.1 |
| 2025年3月 | 3552824 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | 中 | 6.1 |
| 2025年3月 | 3562390 | Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP | 中 | 6.1 |
| 2025年2月 | 3546470 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | 中 | 5.3 |
| 2025年2月 | 3561264 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP | 中 | 5.3 |
| 2025年2月 | 3547581 | Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) | 中 | 4.3 |
| 2025年1月 | 3537476 | Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform | 严重 | 9.9 |
| 2025年1月 | 3550708 | Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) | 严重 | 9.9 |
| 2025年1月 | 3550816 | SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 高 | 8.8 |
| 2025年1月 | 3503138 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) | 中 | 6.0 |
| 2025年1月 | 3536461 | Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 5.3 |
| 2025年1月 | 3550674 | Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | 中 | 4.3 |
| 2024年12月 | 3469791 | Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP | 高 | 8.5 |
| 2024年12月 | 3536361 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 4.3 |
| 2024年11月 | 3504390 | NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 5.3 |
| 2024年11月 | 3508947 | Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 4.3 |
| 2024年9月 | 3501359 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel) | 中 | 6.1 |
| 2024年9月 | 3488039 | Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 5.4 |
| 2024年9月 | 3496410 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 低 | 2.7 |
| 2024年9月 | 3507252 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 低 | 2.0 |
| 2024年8月 | 3468102 | Improper Access Control in SAP Netweaver Application Server ABAP | 中 | 4.7 |
| 2024年8月 | 3494349 | Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 4.3 |
| 2024年7月 | 3456952 | Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 4.7 |
| 2024年7月 | 3454858 | Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform | 中 | 4.1 |
| 2024年6月 | 3453170 | Denial of service (DOS) in SAP NetWeaver and ABAP platform | 中 | 6.5 |
| 2024年5月 | 3448171 | File upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 严重 | 9.6 |
| 2024年5月 | 3448445 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform | 中 | 6.5 |
| 2024年5月 | 3450286 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 6.1 |
| 2024年4月 | 3359778 | Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | 中 | 6.5 |
| 2024年2月 | 3360827 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel) | 中 | 5.3 |
| 2024年1月 | 3387737 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform | 中 | 4.1 |
| 2023年12月 | 3392547 | SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 4.1 |
| 2023年11月 | 3362849 | Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 中 | 5.3 |
| 2023年9月 | 3323163 | Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering) | 中 | 5.5 |
| 2023年8月 | 3348000 | Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform | 中 | 4.9 |
| 2023年7月 | 3318850 | Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | 中 | 6.0 |
| 2023年2月 | 3293786 | Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to send a crafte… | 中 | 6.1 |