CVE-2021-27629

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

PT-2021-14556 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP Web Survey versions 700 through 75F Description: The issue arises from insufficient encoding of input and output parameters, leading to a reflected cross-site scripting vulnerability. This allows a malicious user to...

CVE-2021-27606

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

PT-2021-17564 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73, 8.04 Description: The issue allows an unauthenticated attacker to send a specially crafted packet over a network, triggering an internal erro...

PT-2021-17533 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP RFC Gateway versions 7.22 through 7.83 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network, triggering an internal erro...

CVE-2021-27597

SAP NetWeaver AS for ABAP RFC Gateway, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a...

CVE-2021-27631

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

CVE-2021-27631

CVE-2021-27631 affects SAP NetWeaver ABAP Server/Platform Enqueue Server (multiple KRNL/KERNEL versions). Root cause: improper input validation in EnqConvUniToSrvReq() permits an unauthenticated network-based packet to trigger an internal error, crash the system and cause a denial of service; no ...

CVE-2021-27607

Summary. CVE-2021-27607 affects SAP NetWeaver ABAP Server/Platform (Dispatcher). Multiple KRNL and KERNEL versions (e.g., KRNL32NUC 7.22/7.22EXT; KRNL64UC 7.22/7.49/7.53/7.73; KERNEL 7.22/8.04/7.49/7.53/7.73/7.77/7.81/7.82/7.83) are vulnerable. An unauthenticated attacker can send a specially cra...

CVE-2021-27634

SAP NetWeaver AS for ABAP (RFC Gateway) is affected by CVE-2021-27634. Affected components include KRNL32NUC (7.22/7.22EXT), KRNL64NUC (7.22/7.22EXT/7.49), KRNL64UC (8.04/7.22/7.22EXT/7.49/7.53/7.73), and KERNEL (7.22/8.04/7.49/7.53/7.73/7.77/7.81/7.82/7.83). An unauthenticated attacker can send ...

CVE-2021-27632

CVE-2021-27632 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and kernels up to 8.04). The root cause is improper input validation in the EnqConvUniToSrvReq() method, allowing unauthenticated network packet...

CVE-2021-27630

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

SAP NetWeaver AS ABAP Business Server 缓冲区错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP. The vulnerability stems from an input...

SAP NetWeaver AS ABAP Business Server 跨站脚本漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authorization issue vulnerability exists in SAP NetWeaver AS ABAP and ABAP Platform, which arises from the...

SAP Netweaver 代码问题漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which originates from an input validation...

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver ABAP Server and ABAP Platform, which stems from an inp...

SAP NetWeaver ABAP Server 和 ABAP Platform 授权问题漏洞

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which stems from an input validation erro...

SAP NetWeaver AS ABAP Command Injection (May 2021)

A command injection vulnerability exists in SAP NetWeaver Application Server ABAP due to a flaw in the RDDPUTJR program. An authenticated, local attacker can exploit this, by executing an ABAP report when the attacker has access to the local SAP system, to execute arbitrary command or create a...

SAP NetWeaver AS ABAP Code Injection Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...