Skip to content
Hermes Codex

SAP NetWeaver — Security Intelligence & Vulnerability Profile

1. Software Identity & Security Posture

Section titled “1. Software Identity & Security Posture”
ParameterTechnical Specification
Official NameSAP NetWeaver
Vendor / Projectsap
Canonical IDsap:netweaver
Versioning Schemegeneric
CPE Identifierscpe:2.3:a:sap:netweaver:*:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*
Overall PostureCRITICAL
Recommended Safe ReleaseSAP Note 3660659

Documented CVEs

1 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

0 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to SAP Note 3660659 to neutralize known flaws.

2. 30-Day Risk Trajectory & Trend Evolution

Section titled “2. 30-Day Risk Trajectory & Trend Evolution”

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

2.9 %

= Stable over 30d

CISA KEV Activity

0

No active KEV

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

3. Vulnerability History & Version Applicability Matrix

Section titled “3. Vulnerability History & Version Applicability Matrix”
CVECVSS ScoreEPSS ProbabilityCISA KEVAffected VersionsFixed InHermes Analysis
CVE-2025-4294410 (CRITICAL)2.9%Nov7.50SAP Note 3634501, SAP Note 3660659Analysis →

4. Evaluate Running Versions in Interactive Workbench

Section titled “4. Evaluate Running Versions in Interactive Workbench”

Are you operating SAP NetWeaver in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for SAP NetWeaver Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.