FEDRAMP CATALOG › SAP NS2 Cloud Intelligent Enterprise
SAP NS2 Cloud Intelligent Enterprise
SAP National Security Services Inc. (SAP NS2) · package FR1719841002
Current status
Authorized · Moderate impact · since 2026-07-07
Service modelPaaS, SaaS
MarketplaceRev5 · source: marketplace
Security posture
3 critical
12 high
14 on KEV
· 15 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| JAB Authorization | JAB | 2021-04-01 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2025-42999 | SAP NetWeaver Deserialization Vulnerability |
| CRITICAL | CVE-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability |
| CRITICAL | CVE-2025-31324 | CVE-2025-31324: SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper a |
| HIGH | CVE-2017-12637 | SAP NetWeaver Directory Traversal Vulnerability |
| HIGH | CVE-2019-0344 | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability |
| HIGH | CVE-2016-2386 | SAP NetWeaver SQL Injection Vulnerability |
| HIGH | CVE-2016-2388 | SAP NetWeaver Information Disclosure Vulnerability |
| HIGH | CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability |
| HIGH | CVE-2010-5326 | SAP NetWeaver Remote Code Execution Vulnerability |
| HIGH | CVE-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability |
| HIGH | CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability |
| CRITICAL | CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
| HIGH | CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability |
| HIGH | CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability |