sap_netweaver_sap_gui_for_java vulnerabilities

CVEs whose affected-version data names the sap_netweaver_sap_gui_for_java package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-66768Critical· 9.0

1w ago

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger…

▾ MidnightSAP_SE · SAP NetWeaver (SAP GUI for Java)EPSS 0.32%via NVD