SAP NetWeaver AS Java
自 2023 年 1 月以来共 37 条安全说明。
优先级依据 CVSS 推算，并非 SAP 的优先级：CVSS 9.0 及以上为严重，7.0 及以上为高，4.0 及以上为中，低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me（需要 SAP 登录）。
| 补丁日 | 编号 | 标题 | 优先级（依据 CVSS 推算，并非 SAP 的优先级） | CVSS |
|---|---|---|---|---|
| 2026年8月 | 3758318 | Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) | 中 | 6.3 |
| 2026年7月 | 3748227 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) | 高 | 8.2 |
| 2026年6月 | 3727078 | Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) | 严重 | 9.0 |
| 2026年6月 | 3723655 | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) | 中 | 6.1 |
| 2026年4月 | 3719397 | Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) | 中 | 6.1 |
| 2026年2月 | 3673213 | CRLF Injection vulnerability in SAP NetWeaver Application Server Java | 低 | 3.4 |
| 2025年11月 | 3643603 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | 中 | 5.3 |
| 2025年9月 | 3643865 | Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service) | 严重 | 9.9 |
| 2025年9月 | 3619465 | Missing Authentication check in SAP NetWeaver Application Server Java | 中 | 5.3 |
| 2025年9月 | 3640477 | Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service) | 中 | 4.3 |
| 2025年9月 | 3525295 | Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) | 低 | 3.4 |
| 2025年7月 | 3621771 | Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer) | 严重 | 9.1 |
| 2025年7月 | 3557179 | Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java | 低 | 3.5 |
| 2025年3月 | 3567246 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | 中 | 5.4 |
| 2025年2月 | 3526203 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | 中 | 5.4 |
| 2025年2月 | 3550027 | Information Disclosure vulnerability in SAP NetWeaver Application Server Java | 中 | 4.3 |
| 2025年1月 | 3540108 | Missing Authorization check in SAP NetWeaver Application Server Java | 中 | 6.3 |
| 2025年1月 | 3514421 | Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application) | 中 | 4.8 |
| 2024年12月 | 3536965 | Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services) | 严重 | 9.1 |
| 2024年12月 | 3351041 | XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA | 中 | 5.3 |
| 2024年11月 | 3335394 | Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory) | 中 | 6.5 |
| 2024年11月 | 3393899 | Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) | 中 | 5.3 |
| 2024年11月 | 3522953 | Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager) | 中 | 4.7 |
| 2024年9月 | 3477359 | Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service) | 中 | 6.0 |
| 2024年9月 | 3505503 | Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application) | 中 | 4.8 |
| 2024年6月 | 3460407 | Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) | 高 | 7.5 |
| 2024年6月 | 3425571 | Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) | 中 | 5.3 |
| 2024年3月 | 3433192 | Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in) | 严重 | 9.1 |
| 2024年2月 | 3426111 | XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) | 高 | 8.6 |
| 2024年2月 | 3417627 | Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application) | 中 | 6.1 |
| 2023年11月 | 3366410 | Information Disclosure in NetWeaver AS Java Logon | 中 | 5.3 |
| 2023年10月 | 3333426 | Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application) | 中 | 6.5 |
| 2023年7月 | 3324732 | Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) | 中 | 5.3 |
| 2023年3月 | 3252433 | Improper Access Control in SAP NetWeaver AS for Java | 严重 | 9.9 |
| 2023年3月 | 3288096 | Improper Access Control in SAP NetWeaver AS Java (Cache Management Service) | 中 | 5.3 |
| 2023年3月 | 3288480 | Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service) | 中 | 5.3 |
| 2023年1月 | 3268093 | Improper access control in SAP NetWeaver AS for Java | 严重 | 9.4 |