Sap Netweaver As Abap (Sap Se) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2023-09-12. Vendor: Sap Se.
CVEs of Sap Netweaver As Abap
- CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
- CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
- CVE-2022-35294 - CVSS 5.4 (medium), 2022-09-13: An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and…
- CVE-2022-29614 - CVSS 5 (medium), 2022-06-14: SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53,…
- CVE-2021-44235 - CVSS 6.7 (medium), 2021-12-14: Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an…
- CVE-2021-33663 - CVSS 5.8 (medium), 2021-06-09: SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -…
- CVE-2021-27611 - CVSS 8.2 (high), 2021-05-11: SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the…
- CVE-2021-21446 - CVSS 7.5 (high), 2021-01-12: SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service,…
- CVE-2020-26835 - CVSS 6.1 (medium), 2020-12-09: SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in…
- CVE-2020-6275 - CVSS 9.8 (critical), 2020-06-10: SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where…
