Skip to contentSap Application Server vulnerabilities
- sap netweaver application server java, sap se netweaver as for java (telnet commands) +1 moreAn unauthorized attacker may be able to entice an administrator to invoke telnet commands of an...CVE-2021-214857.4 High
- sap netweaver application server java, sap se netweaver as for java (applications based on htmlb for java) +1 moreSAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized...CVE-2021-276015.4 Medium
- sap netweaver application server abap, sap se netweaver as for abap +1 moreAn RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750...CVE-2021-276036.5 Medium
- sap netweaver application server java, sap se netweaver as for java (http service) +1 moreSAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7...CVE-2021-214924.3 Medium
- sap netweaver application server java, sap se netweaver as for java (customer usage provisioning servlet) +1 moreSAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows...CVE-2021-275986.5 Medium
- sap netweaver application server java, sap se netweaver application server java (applications based on web dynpro java) +1 moreSAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10,...CVE-2021-214914.7 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated...CVE-2021-214467.5 High
- sap se s4 hana (sap landscape transformation), sap netweaver application server abap, s\/4 hana +1 more +3 moreSAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700,...CVE-2020-268327.6 High
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL...CVE-2020-268355.3 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreProcess Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...CVE-2020-268266.5 Medium
- sap se netweaver as java (p2p cluster communication), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50,...CVE-2020-2682910.0 Critical
- sap netweaver application server java, sap se netweaver as java (key storage service) +1 moreSAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the...CVE-2020-268165.4 Medium
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...CVE-2020-268186.5 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreSAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is...CVE-2020-268209.1 Critical
- sap se netweaver as abap (web dynpro), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782,...CVE-2020-268195.4 Medium
- sap netweaver application server javaSAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an...CVE-2020-63654.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap (powl test application) +1 moreUser enumeration vulnerability can be exploited to get a list of user accounts and personal user...CVE-2020-63714.3 Medium
- sap netweaver application server javaSAP NetWeaver Application Server Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50...CVE-2020-63196.1 Medium
- sap netweaver application server java, sap se netweaver as java (xml forms) +1 moreSAP NetWeaver Application Server JAVA(XML Forms) versions 7.30, 7.31, 7.40, 7.50 does not...CVE-2020-63135.4 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreImproper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and...CVE-2020-63104.3 Medium
- sap netweaver application server java, sap se netweaver as java (engineapi), netweaver as java (j2ee-frmw) +1 more +3 moreSAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50;...CVE-2020-63097.5 High
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755,...CVE-2020-62994.3 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions - 700, 701, 702, 710, 711, 730, 731, 740,...CVE-2020-62968.3 High
- sap netweaver, sap se netweaver as java (lm configuration wizard), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-6287In KEVPublic exploitEPSS 94.7%10.0 Critical
- sap se netweaver as java (lm configuration wizard), sap netweaver application server java +1 moreThe insufficient input path validation of certain parameter in the web service of SAP NetWeaver...CVE-2020-6286Public exploitEPSS 24.3%5.3 Medium
- sap se netweaver as java (iiop service) (core-tools), netweaver as java (iiop service) (servercore), sap netweaver application server java +2 moreSAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7...CVE-2020-62825.8 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform, sap netweaver application server abap +2 moreSAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with...CVE-2020-62802.7 Low
- sap se netweaver as java, sap netweaver application server java +1 moreStandalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00...CVE-2020-62636.9 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754,...CVE-2020-62757.6 High
- sap se netweaver as abap (banking services), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C,...CVE-2020-62706.5 Medium
- sap application server, sap se application server abap (st-pi) +1 moreService Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C,...CVE-2020-62629.9 Critical
- sap netweaver application server abap, sap se netweaver as abap (web dynpro abap) (sap basis), netweaver as abap (web dynpro abap) (sap ui) +2 moreSAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700,...CVE-2020-62405.3 Medium
- sap se netweaver as java (http service), sap netweaver application server java +1 moreSAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows...CVE-2020-62244.5 Medium
- sap netweaver application server java, sap se netweaver application server java (user management engine) +1 moreSAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30,...CVE-2020-62025.5 Medium
- sap netweaver application servernwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks...CVE-2015-79686.4 Medium
- sap se netweaver as java (heap dump application), sap netweaver application server java +1 moreCertain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7...CVE-2020-61905.8 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap netweaver application server java, sap se netweaver application server java (j2ee-framework) +1 moreAn administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in...CVE-2019-03898.8 High
- sap netweaver application server java, sap se netweaver as for java (web container)-engineapi, netweaver as for java (web container)-sap-jeecor +2 moreSAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30,...CVE-2019-03557.2 High
- sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 moreA remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for...CVE-2019-03459.8 Critical
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...CVE-2019-03277.2 High
- sap se abap server and abap platform (sap basis), sap netweaver application server abap, netweaver as abap +2 moreABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode...CVE-2019-03216.1 Medium
- sap se netweaver application server for java (startup framework), sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions...CVE-2019-03185.3 Medium
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...CVE-2019-02755.4 Medium
- sap netweaver as abap, netweaver application server abap, sap se abap platform(sap basis) +2 moreCustomizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02,...CVE-2019-02578.8 High
- sap netweaver application server java, netweaver as java (servercore) +1 moreSAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host...CVE-2018-25046.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access...CVE-2018-25037.4 High
- sap netweaver application server java, netweaver application server (java library) +1 moreSAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents...CVE-2018-24927.1 High
- sap netweaver as java, netweaver application server java +1 moreThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...CVE-2018-24526.1 Medium
- sap netweaver application server javaThe Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to...CVE-2017-145817.5 High
- Show moreLoading…