Skip to contentSap Netweaver vulnerabilities
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412124.9 Medium
- sap netweaver application server abap, sap se netweaver as abap (sap gui for html within the fiori launchpad) +1 moreAn attacker with no prior authentication could craft and send malicious script to SAP GUI for...CVE-2022-397996.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreSAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user...CVE-2022-352986.1 Medium
- sap netweaver application server abap, sap se netweaver as abap +1 moreAn attacker with basic business user privileges could craft and upload a malicious file to SAP...CVE-2022-352945.4 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-352256.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (wpc) +1 moreA vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently...CVE-2022-352276.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-351726.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not...CVE-2022-351706.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-322476.1 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (design time repository) +1 moreDue to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time...CVE-2022-296186.1 Medium
- sap netweaver developer studio, sap se netweaver developer studio (nwds) +1 moreSAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the...CVE-2022-296153.4 Low
- sap host agent, netweaver abap, sap se netweaver as abap, as java, abap platform and hana database +2 moreSAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP...CVE-2022-296145.0 Medium
- sap host agent, sap se netweaver, abap platform and sap host agent, sap netweaver abap +2 moreSAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7...CVE-2022-296124.3 Medium
- sap router, sap se netweaver and abap platform, sap netweaver as abap +2 more +4 moreDepending on the configuration of the route permission table in file 'saprouttab', it is possible...CVE-2022-276689.8 Critical
- sap netweaver, sap se netweaver (ep web page composer) +1 moreSome part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document...CVE-2022-282176.5 Medium
- sap se host agent, netweaver and abap platform, sap netweaver as abap kernel +2 more +4 moreSAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in...CVE-2022-296167.5 High
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...CVE-2022-296118.8 High
- sap netweaver application server abapSAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...CVE-2022-296105.4 Medium
- sap netweaver as abap kernel, netweaver as abap krnl64uc, webdispatcher +2 more +4 moreThe Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does...CVE-2022-276566.1 Medium
- sap netweaver abap, sap se netweaver abap server and abap platform +1 moreSAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated...CVE-2022-282154.7 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreBy overlong input values an attacker may force overwrite of the internal program stack in SAP Web...CVE-2022-287727.5 High
- sap netweaver application server for javaAn unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver...CVE-2022-276697.5 High
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...CVE-2022-287737.5 High
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...CVE-2022-261056.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode...CVE-2022-243976.1 Medium
- sap se netweaver (real time messaging framework), sap netweaver application server java +1 moreUnder certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an...CVE-2022-261035.3 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...CVE-2022-243956.1 Medium
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreDue to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...CVE-2022-261025.4 Medium
- sap se netweaver application server abap and abap platform, sap netweaver abap +1 moreA high privileged user who has access to transaction SM59 can read connection details stored with...CVE-2022-225454.9 Medium
- sap se netweaver application server for abap (kernel) and abap platform (kernel), sap netweaver abap, netweaver as abap +2 moreSAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7...CVE-2022-225437.5 High
- sap se netweaver as abap (workplace server), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753,...CVE-2022-225407.5 High
- sap content server, netweaver application server abap, web dispatcher +2 more +4 moreSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP...CVE-2022-22536In KEVPublic exploitEPSS 97.9%10.0 Critical
- sap netweaver, sap se netweaver (abap and java application servers) +1 moreDue to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to...CVE-2022-225346.1 Medium
- sap netweaver application server javaDue to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22...CVE-2022-225337.5 High
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...CVE-2022-225329.8 Critical
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...CVE-2021-420674.3 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreTwo methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730,...CVE-2021-442356.7 Medium
- sap abap platform, netweaver application server abap, sap se abap server & abap platform (translation tools) +2 moreInternally used text extraction reports allow an attacker to inject code that can be executed by...CVE-2021-442319.8 Critical
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...CVE-2021-405044.9 Medium
- sap netweaverSAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs,...CVE-2021-381836.1 Medium
- sap netweaver application server abap, sap se netweaver application server for abap (sap cloud print manager and sapsprint) +1 moreClient-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application...CVE-2021-404999.8 Critical
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752...CVE-2021-404964.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreThe software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702...CVE-2021-381788.8 High
- sap netweaver application server abap, netweaver abap, sap se netweaver as abap and abap platform +2 moreThere are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP...CVE-2021-404955.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752,...CVE-2021-381817.5 High
- sap netweaver portal, sap se netweaver enterprise portal +1 moreThe SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews...CVE-2021-337058.1 High
- sap netweaver development infrastructure, sap se netweaver development infrastructure (notification service) +1 moreNWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user...CVE-2021-336916.9 Medium
- sap netweaver development infrastructure, sap se netweaver development infrastructure (component build service) +1 moreServer-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver...CVE-2021-33690Public exploitEPSS 69.1%9.9 Critical
- sap netweaver, sap se netweaver (visual composer 7.0 rt) +1 moreSAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an...CVE-2021-38163In KEVPublic exploitEPSS 36.9%9.9 Critical
- sap netweaver application server java, sap se netweaver application server java (jms connector service) +1 moreSAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31,...CVE-2021-3753510.0 Critical
- Show moreLoading…