CVE-2022-28215: URL Redirection to Untrusted Site

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

SAP NetWeaver AS ABAP Code Injection (3048657)

A code injection vulnerability exists in SAP NetWeaver Application Server ABAP Reconciliation Framework. ABAP Server and ABAP Platform may allow a high privileged attacker to inject code that can be executed by the application. An attacker could potentially delete critical information and make th...

SAP NetWeaver AS ABAP and ABAP Information Disclosure (3044754)

An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP. ABAP Server and ABAP Platform may expose functions externally that can lead to an information disclosure. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2021-33677

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure...

CVE-2021-33677: Undefined Security Weakness

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure...

CVE-2021-27610

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by maliciou...

PT-2021-7873 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804 Description: The issue is related to improper authentication due to the inconsistent and undistinguished format of internal and...

CVE-2021-27610: Improper Authentication

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by maliciou...

SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

SAP NetWeaver ABAP Server and ABAP Platform Memory Corruption Vulnerability (CNVD-2021-47715)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver ABAP Server and ABAP Platform, which stems from an inp...

CVE-2021-27632

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

Input validation

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

PT-2021-17566 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73, 8.04 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet ov...

CVE-2021-27632

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

PT-2021-17567 · Sap · Sap Netweaver Abap Server

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73 SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server version 8.04 Description: The issue allows an unauthenticated attacker without...

PT-2021-17563 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Dispatcher versions 7.22 through 7.83 Description: The issue allows an unauthenticated attacker to send a specially crafted packet over a network, triggering an internal error in the system due to...

PT-2021-17543 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Dispatcher versions 7.22 through 7.83 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network, triggering...

PT-2021-17565 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73, 8.04 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet ov...

CVE-2021-27606

CVE-2021-27606 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and KERNEL series). The flaw is an input validation issue in method EncOAMParamStore() that allows an unauthenticated attacker to send a crafted...