Skip to contentSap Netweaver vulnerabilities
- sap netweaver, s\/4hana, sap se automated note search tool (sap basis) +2 moreUnder certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP...CVE-2020-61846.1 Medium
- sap se netweaver as java (heap dump application), sap netweaver application server java +1 moreCertain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7...CVE-2020-61905.8 Medium
- sap se netweaver (guided procedures), sap netweaver guided procedures +1 moreSAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2020-61874.9 Medium
- sap se netweaver (knowledge management ice service), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an...CVE-2020-61936.1 Medium
- sap netweaverSAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the...CVE-2011-15179.8 Critical
- sap netweaverA Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in...CVE-2013-15937.5 High
- sap netweaverA Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics()...CVE-2013-1592Public exploitEPSS 24.4%9.8 Critical
- sap netweaver internet communication manager \(kernel\), netweaver internet communication manager \(krnl32nuc\), netweaver internet communication manager \(krnl32uc\) +7 more +9 moreImproper input validation in SAP NetWeaver Internet Communication Manager (update provided in...CVE-2020-63045.9 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50)...CVE-2019-03914.3 Medium
- sap netweaver application server java, sap se netweaver application server java (j2ee-framework) +1 moreAn administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in...CVE-2019-03898.8 High
- sap netweaver process integration, sap se netweaver process integration (b2b toolkit) +1 moreSAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform...CVE-2019-03674.3 Medium
- sap netweaver process integration, sap se netweaver process integration runtime workbench – messaging and sap xiaf +1 moreUnder certain conditions SAP NetWeaver Process Integration Runtime Workbench ? MESSAGING and...CVE-2019-03564.3 Medium
- sap netweaver application server java, sap se netweaver as for java (web container)-engineapi, netweaver as for java (web container)-sap-jeecor +2 moreSAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30,...CVE-2019-03557.2 High
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreA remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry)...CVE-2019-03518.8 High
- sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 moreA remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for...CVE-2019-03459.8 Critical
- sap netweaver process integration, sap se netweaver process integration (java proxy runtime) +1 moreJava Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7...CVE-2019-03376.1 Medium
- sap netweaver process integration, sap se netweaver process integration abap tests (sap basis) +1 moreABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process...CVE-2019-03287.2 High
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...CVE-2019-03277.2 High
- sap se abap server and abap platform (sap basis), sap netweaver application server abap, netweaver as abap +2 moreABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode...CVE-2019-03216.1 Medium
- sap se netweaver application server for java (startup framework), sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions...CVE-2019-03185.3 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7...CVE-2019-03164.8 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xipck) +1 more +3 moreUnder certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration ...CVE-2019-03157.5 High
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSeveral web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11,...CVE-2019-03125.3 Medium
- sap netweaver process integration, sap se netweaver process integration(sap xiesr and sap xitool) +1 moreJava Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and...CVE-2019-03054.3 Medium
- sap netweaver process integration, sap se netweaver process integration (adapter engine) +1 moreSAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7...CVE-2019-02837.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...CVE-2019-02825.3 Medium
- sap netweaver process integration, sap se netweaver process integration (messaging system) +1 moreUnder certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration ...CVE-2019-02784.3 Medium
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...CVE-2019-02755.4 Medium
- sap netweaver as abap, netweaver application server abap, sap se abap platform(sap basis) +2 moreCustomizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02,...CVE-2019-02578.8 High
- sap basis, netweaver, sap se gateway of abap application server(sap basis) +1 more +3 moreUnder certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7...CVE-2019-02485.9 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreSAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host...CVE-2018-25046.1 Medium
- sap netweaver application server java, netweaver as java (servercore) +1 moreBy default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access...CVE-2018-25037.4 High
- sap business application software integrated solution, basis (abap platform), basis (as abap of sap netweaver) +2 moreNecessary authorization checks for an authenticated user, resulting in escalation of privileges,...CVE-2018-24948.0 High
- sap netweaver application server java, netweaver application server (java library) +1 moreSAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents...CVE-2018-24927.1 High
- sap knowledge management (xmlforms) in sap netweaver, netweaver +1 moreKnowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not...CVE-2018-24778.8 High
- sap netweaver, netweaver (forums) +1 moreDue to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an...CVE-2018-24766.1 Medium
- sap netweaver, netweaver application server for abap +1 moreIn SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to...CVE-2018-24706.1 Medium
- sap webdynpro, netweaver +1 moreSAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-24646.1 Medium
- sap netweaver, netweaver bi +1 moreIn certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7...CVE-2018-24628.8 High
- sap netweaver as java, netweaver application server java +1 moreThe logon application of SAP NetWeaver AS Java 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 does...CVE-2018-24526.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2018-24356.1 Medium
- sap netweaver, user interface technology, netweaver (ui infra) +3 more +5 moreA content spoofing vulnerability in the following components allows to render html pages...CVE-2018-24344.3 Medium
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 moreSAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7...CVE-2018-24154.7 Medium
- sap netweaver system landscape directory, sap se netweaver system landscape directory, lm-core +1 moreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform...CVE-2018-23689.8 Critical
- sap netweaver portal, sap se netweaver portal webdynpro runtime +1 moreSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2018-23656.1 Medium
- sap netweaver java web applicationThe SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not...CVE-2018-23716.1 Medium
- sap netweaver, business application software integrated solution +1 moreSAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7...CVE-2018-23638.8 High
- sap netweaver internet transaction server, netweaver internet transaction server (its), business application software integrated solution +2 moreSAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40,...CVE-2017-166827.2 High
- sap epbc, epbc2, kmc-bc +1 more +3 moreServer Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management...CVE-2017-166784.7 Medium
- sap netweaver application server javaThe Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to...CVE-2017-145817.5 High
- Show moreLoading…