Exploited Vulnerabilities DailySAP NetWeaver: known exploited vulnerabilities
Entries10
Ransomware-linked2
First added2021-11-03
Latest2025-05-15
EPSS compared
99.4%
95.1%
94.7%
71.5%
52.2%
47.2%
36.8%
24.2%
17.7%
13.8%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.8% | Known |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 99.4% | Known |
| CVE-2017-12637 | SAP NetWeaver | 2025-03-19 | 95.1% | Unknown |
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 36.8% | Unknown |
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 52.2% | Unknown |
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 71.5% | Unknown |
| CVE-2020-6287 | SAP NetWeaver | 2021-11-03 | 94.7% | Unknown |
| CVE-2016-9563 | SAP NetWeaver | 2021-11-03 | 24.2% | Unknown |
| CVE-2016-3976 | SAP NetWeaver | 2021-11-03 | 47.2% | Unknown |
| CVE-2010-5326 | SAP NetWeaver | 2021-11-03 | 17.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.