SAP NetWeaver Application Server Java (Web Container) vulnerabilities

1 known vulnerability in SAP NetWeaver Application Server Java (Web Container) from SAP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  SAP NetWeaver Application Server Java (Web…: Path Traversal: '.../...//'

  CVE-2026-40128Jun 9, 2026SAP

  SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included fi