Skip to contentSap Netweaver Application Server vulnerabilities
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions...CVE-2023-245226.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238606.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...CVE-2023-238596.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 moreDue to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...CVE-2023-238586.1 Medium
- sap netweaver as abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740,...CVE-2023-238543.8 Low
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreAn unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform -...CVE-2023-238536.1 Medium
- sap netweaver as for java, netweaver application server for java +1 moreImproper access control in SAP NetWeaver AS for JavaCVE-2023-0017EPSS 15.7%9.4 Critical
- sap netweaver abap server and abap platform, netweaver application server abap, netweaver application server abap kernel +2 more +4 moreCapture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00149.0 Critical
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformCVE-2023-00136.1 Medium
- sap netweaver as for java (http provider service), netweaver application server java +1 moreDue to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7...CVE-2022-412626.1 Medium
- sap se netweaver abap server and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users...CVE-2022-412154.7 Medium
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412148.7 High
- sap netweaver application server abap, sap se netweaver application server abap and abap platform +1 moreDue to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform...CVE-2022-412124.9 Medium
- sap netweaver application server abap, sap se netweaver as abap (sap gui for html within the fiori launchpad) +1 moreAn attacker with no prior authentication could craft and send malicious script to SAP GUI for...CVE-2022-397996.1 Medium
- sap netweaver application server abap, sap se netweaver as abap +1 moreAn attacker with basic business user privileges could craft and upload a malicious file to SAP...CVE-2022-352945.4 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...CVE-2022-296118.8 High
- sap netweaver application server abapSAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...CVE-2022-296105.4 Medium
- sap netweaver application server for javaAn unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver...CVE-2022-276697.5 High
- sap se netweaver (real time messaging framework), sap netweaver application server java +1 moreUnder certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an...CVE-2022-261035.3 Medium
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreDue to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...CVE-2022-261025.4 Medium
- sap se netweaver as abap (workplace server), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753,...CVE-2022-225407.5 High
- sap content server, netweaver application server abap, web dispatcher +2 more +4 moreSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP...CVE-2022-22536In KEVPublic exploitEPSS 97.9%10.0 Critical
- sap netweaver application server javaDue to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22...CVE-2022-225337.5 High
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...CVE-2022-225329.8 Critical
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...CVE-2021-420674.3 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreTwo methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730,...CVE-2021-442356.7 Medium
- sap abap platform, netweaver application server abap, sap se abap server & abap platform (translation tools) +2 moreInternally used text extraction reports allow an attacker to inject code that can be executed by...CVE-2021-442319.8 Critical
- sap netweaver application server abap, sap se netweaver as for abap and abap platform +1 moreA certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions...CVE-2021-405044.9 Medium
- sap netweaver application server abap, sap se netweaver application server for abap (sap cloud print manager and sapsprint) +1 moreClient-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application...CVE-2021-404999.8 Critical
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752...CVE-2021-404964.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreThe software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702...CVE-2021-381788.8 High
- sap netweaver application server abap, netweaver abap, sap se netweaver as abap and abap platform +2 moreThere are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP...CVE-2021-404955.3 Medium
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752,...CVE-2021-381817.5 High
- sap netweaver application server java, sap se netweaver application server java (jms connector service) +1 moreSAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31,...CVE-2021-3753510.0 Critical
- sap se netweaver as java (enterprise portal), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (Enterprise Portal), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals...CVE-2021-336874.5 Medium
- sap netweaver application server java, sap se netweaver as java (administrator applications) +1 moreWhen user with insufficient privileges tries to access any application in SAP NetWeaver...CVE-2021-336893.5 Low
- sap se netweaver as abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT,...CVE-2021-336845.3 Medium
- sap se netweaver as abap (reconciliation framework), sap netweaver application server abap +1 moreA function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702,...CVE-2021-336786.5 Medium
- sap netweaver application server java, sap se netweaver as for java (http service) +1 moreSAP NetWeaver AS for Java (Http Service Monitoring Filter), versions - 7.10, 7.11, 7.20, 7.30, 7...CVE-2021-336707.5 High
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784,...CVE-2021-336776.5 Medium
- sap netweaver abap, netweaver application server abap, sap se netweaver as abap and abap platform +2 moreSAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752,...CVE-2021-276109.0 Critical
- sap netweaver application server abap, sap se netweaver application server abap (applications based on sap gui for html) +1 moreSAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions -...CVE-2021-336655.4 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC -...CVE-2021-336635.8 Medium
- sap netweaver application server abap, sap se netweaver application server abap (applications based on web dynpro abap) +1 moreSAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI ...CVE-2021-336645.4 Medium
- sap se netweaver as for java, sap netweaver application server for java +1 moreSAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker...CVE-2021-276359.0 Critical
- sap netweaver application server for java, sap se netweaver as for java (useradmin) +1 moreInformation Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server...CVE-2021-276215.5 Medium
- sap netweaver application server abap, sap se netweaver as abap and abap platform (srm rfc submit report) +1 moreSAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751,...CVE-2021-214736.3 Medium
- sap se netweaver as for abap (web survey), sap netweaver application server abap +1 moreSAP NetWeaver AS for ABAP (Web Survey), versions - 700, 702, 710, 711, 730, 731, 750, 750, 752,...CVE-2021-214906.1 Medium
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to...CVE-2021-276118.2 High
- sap netweaver application server java, sap se netweaver as for java (telnet commands) +1 moreAn unauthorized attacker may be able to entice an administrator to invoke telnet commands of an...CVE-2021-214857.4 High
- Show moreLoading…