Skip to contentSap Se Netweaver vulnerabilities
- sap abap platform, netweaver, sap se abap platform (sap basis) +1 more +3 moreUnder some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702...CVE-2020-61815.8 Medium
- sap se netweaver as java (heap dump application), sap netweaver application server java +1 moreCertain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7...CVE-2020-61905.8 Medium
- sap se netweaver (guided procedures), sap netweaver guided procedures +1 moreSAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-61874.9 Medium
- sap se netweaver (knowledge management ice service), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an...CVE-2020-61936.1 Medium
- sap netweaver internet communication manager \(kernel\), netweaver internet communication manager \(krnl32nuc\), netweaver internet communication manager \(krnl32uc\) +7 more +9 moreImproper input validation in SAP NetWeaver Internet Communication Manager (update provided in...CVE-2020-63045.9 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap netweaver application server java, sap se netweaver application server java (j2ee-framework) +1 moreAn administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in...CVE-2019-03898.8 High
- sap netweaver process integration, sap se netweaver process integration (b2b toolkit) +1 moreSAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform...CVE-2019-03674.3 Medium
- sap netweaver process integration, sap se netweaver process integration runtime workbench – messaging and sap xiaf +1 moreUnder certain conditions SAP NetWeaver Process Integration Runtime Workbench ? MESSAGING and...CVE-2019-03564.3 Medium
- sap netweaver application server java, sap se netweaver as for java (web container)-engineapi, netweaver as for java (web container)-sap-jeecor +2 moreSAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30,...CVE-2019-03557.2 High
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreA remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry)...CVE-2019-03518.8 High
- sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 moreA remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for...CVE-2019-03459.8 Critical
- sap netweaver process integration, sap se netweaver process integration (java proxy runtime) +1 moreJava Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7...CVE-2019-03376.1 Medium
- sap netweaver process integration, sap se netweaver process integration abap tests (sap basis) +1 moreABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process...CVE-2019-03287.2 High
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...CVE-2019-03277.2 High
- sap se netweaver application server for java (startup framework), sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions...CVE-2019-03185.3 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7...CVE-2019-03164.8 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xipck) +1 more +3 moreUnder certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration ...CVE-2019-03157.5 High
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSeveral web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11,...CVE-2019-03125.3 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr and sap xitool) +1 moreJava Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and...CVE-2019-03054.3 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreFTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2019-03049.8 Critical
- sap netweaver process integration, sap se netweaver process integration (adapter engine) +1 moreSAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7...CVE-2019-02837.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...CVE-2019-02825.3 Medium
- sap netweaver process integration, sap se netweaver process integration (messaging system) +1 moreUnder certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration ...CVE-2019-02784.3 Medium
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...CVE-2019-02755.4 Medium
- sap infrastructure, ui, sap se ui for sap netweaver 7.00 +2 moreUnder certain conditions SAP UI5 Handler allows an attacker to access information which would...CVE-2018-24285.3 Medium
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...CVE-2018-24249.8 Critical
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 moreSAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7...CVE-2018-24154.7 Medium
- sap netweaver system landscape directory, sap se netweaver system landscape directory, lm-core +1 moreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform...CVE-2018-23689.8 Critical
- sap netweaver portal, sap se netweaver portal webdynpro runtime +1 moreSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-23656.1 Medium
- sap netweaver java web applicationThe SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not...CVE-2018-23716.1 Medium
- sap netweaver, business application software integrated solution +1 moreSAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7...CVE-2018-23638.8 High