SAP SAP NetWeaver Process Integration

Name: SAP SAP NetWeaver Process Integration
Brand: SAP

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high7medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0328US	high7.2	3.42% (89th)	—	no fix	2019-07-10	6 versions
CVE-2019-0337US	medium6.1	0.84% (58th)	—	no fix	2019-08-14	6 versions
CVE-2019-0356US	medium4.3	0.70% (53rd)	—	no fix	2019-09-10	3 versions
CVE-2019-0316US	medium4.8	0.62% (50th)	—	no fix	2019-06-14	7 versions
CVE-2019-0283US	high7.1	0.61% (49th)	—	no fix	2019-04-10	6 versions
CVE-2023-35873US	medium6.5OT elevated	0.57% (47th)	—	no fix	2023-07-11	≤ 7.50
CVE-2023-35872US	medium6.5OT elevated	0.57% (47th)	—	no fix	2023-07-11	≤ 7.50
CVE-2019-0367US	medium4.3OT elevated	0.55% (46th)	—	no fix	2019-10-08	2 versions
CVE-2023-37488US	medium6.1	0.36% (30th)	—	no fix	2023-08-08	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.