Skip to contentSap Netweaver vulnerabilities
- sap se netweaver as abap (applications based on unified rendering), sap netweaver application server abap +1 moreCode Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)CVE-2023-406245.5 Medium
- sap netweaver, sap se netweaver (guided procedures) +1 moreMissing Authentication check in SAP NetWeaver (Guided Procedures)CVE-2023-413675.3 Medium
- sap commoncryptolib, content server, extended application services and runtime +8 more +10 moreMemory Corruption vulnerability in SAP CommonCryptoLibCVE-2023-403087.5 High
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreMissing Authorization check in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2023-374924.9 Medium
- sap netweaver process integrationCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process IntegrationCVE-2023-374886.1 Medium
- sap se ecc and sap s/4hana (is-oil), sap netweaver +1 moreOS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)CVE-2023-369229.1 Critical
- sap netweaver application server abap, sap se netweaver as abap and abap platform +1 moreImproper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformCVE-2023-358746.0 Medium
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)CVE-2023-358736.5 Medium
- sap netweaver process integration, sap se netweaver process integration (message display tool) +1 moreMissing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)CVE-2023-358726.5 Medium
- sap se netweaver (bi cont add on), sap netweaver bi content +1 moreDirectory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)CVE-2023-339898.7 High
- sap se netweaver as for java (log viewer), sap netweaver application server for java +1 moreLog Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)CVE-2023-314055.3 Medium
- sap netweaver, sap se netweaver enterprise portal +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalCVE-2023-339856.1 Medium
- sap netweaver, sap se netweaver (design time repository) +1 moreCross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)CVE-2023-339846.4 Medium
- sap netweaver, sap se netweaver (change and transport system) +1 moreDenial of Service in SAP NetWeaverCVE-2023-321142.7 Low
- sap se as netweaver java, sap netweaver application server for java +1 moreImproper access control during application start-up in SAP AS NetWeaver JAVA.CVE-2023-307448.2 High
- sap netweaver, netweaver (bi cont addon) +1 moreDirectory/Path Traversal vulnerability in SAP NetWeaver.CVE-2023-29186EPSS 24.8%8.7 High
- sap netweaver as for abap (business server pages), netweaver as abap business server pages +1 moreDenial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)CVE-2023-291855.3 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-287636.5 Medium
- sap netweaver enterprise portalMissing Authentication check in SAP NetWeaver Enterprise PortalCVE-2023-287616.5 Medium
- sap se gui for html, sap netweaver, netweaver application server abap +2 moreCross-Site Scripting (XSS) vulnerability in SAP GUI for HTMLCVE-2023-274996.1 Medium
- sap netweaver as java for deploy serviceImproper Access Control in SAP NetWeaver AS Java for Deploy ServiceCVE-2023-245275.3 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-275018.7 High
- sap netweaver as for abap and abap platform (saprsbro program), netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-275009.6 Critical
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-272706.5 Medium
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreDirectory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-272699.6 Critical
- sap netweaver as java (object analyzing service), netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)CVE-2023-272685.3 Medium
- sap netweaver (sap enterprise portal), netweaver enterprise portal +1 moreXML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)CVE-2023-264616.8 Medium
- sap netweaver application server for java, netweaver as for java +1 moreImproper Access Control in SAP NetWeaver AS Java (Cache Management Service)CVE-2023-264605.3 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-256186.5 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreServer Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-264597.4 High
- sap netweaver application server java, netweaver as java for classload service +1 moreImproper Access Control in SAP NetWeaver AS Java (Classload Service)CVE-2023-245265.3 Medium
- sap netweaver as for java, netweaver application server for java +1 moreImproper Access Control in SAP NetWeaver AS for JavaCVE-2023-238579.9 Critical
- sap netweaverCross-Site Scripting (XSS) vulnerability in SAP NetWeaverCVE-2023-00216.1 Medium
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreSAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751,...CVE-2023-256146.1 Medium
- sap netweaver as abap (business server pages application), netweaver as abap business server pages +1 moreDue to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702,...CVE-2023-245296.1 Medium
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions...CVE-2023-245226.1 Medium
- sap netweaver as abap (bsp framework), netweaver as abap business server pages +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701...CVE-2023-245216.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238606.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238596.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 moreDue to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...CVE-2023-238586.1 Medium
- sap netweaver as abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740,...CVE-2023-238543.8 Low
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreAn unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform -...CVE-2023-238536.1 Medium
- sap netweaver as for java, netweaver application server for java +1 moreImproper access control in SAP NetWeaver AS for JavaCVE-2023-0017EPSS 15.7%9.4 Critical
- sap netweaver abap server and abap platform, netweaver application server abap, netweaver application server abap kernel +2 more +4 moreCapture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00149.0 Critical
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00136.1 Medium
- sap netweaver process integrationAn unauthenticated attacker over the network can attach to an open interface exposed through JNDI...CVE-2022-41272Public exploit9.9 Critical
- sap netweaver process integrationAn unauthenticated user can attach to an open interface exposed through JNDI by the Messaging...CVE-2022-412719.4 Critical
- sap netweaver as for java (http provider service), netweaver application server java +1 moreDue to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7...CVE-2022-412626.1 Medium
- sap se netweaver abap server and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...CVE-2022-412154.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412148.7 High
- Show moreLoading…