PT-2021-22905

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP versions 7.70, 7.70 PI, 7.70 BYD Description The client-side printing services SAP Cloud Print Manager and SAPSprint allow an attacker to inject code that can be executed by the application, potentiall...

PT-2021-6087 · Sap · Sap Netweaver As Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756 Description: The software logistics system enables a malicious user to transfer ABAP code artifacts or content, bypassing th...

PT-2021-22901 · Sap · Sap Netweaver Application Server For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755 Description: The issue involves multiple Denial-of-Service vulnerabilities. An unauthorized attacker can utilize the public SICF service...

CVE-2021-40499: Improper Control of Generation of Code

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2021-38181: Undefined Security Weakness

SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2021-40495: Undefined Security Weakness

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application...

CVE-2021-38178: Undefined Security Weakness

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious...

PT-2021-21990 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions 700 through 756 Description: The issue allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Recommendations: For versions 700...

CVE-2021-38176

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

Input validation

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

CVE-2021-38176

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

CVE-2021-38176

The connected documents confirm a concrete vulnerability: CVE-2021-38176 affects SAP NZDT (a conversion/deployment of SAP S/4HANA 1809 to AWS). The root cause is improper input sanitization in NZDT function modules, allowing an authenticated user with certain privileges to remotely invoke these m...

CVE-2021-38176: Improper Neutralization of Special Elements used in an SQL Command

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

PT-2021-21985

Name of the Vulnerable Software and Affected Versions: SAP NZDT affected versions not specified Description: The issue arises from improper input sanitization, allowing an authenticated user with specific privileges to remotely execute manipulated queries or inject ABAP code, thereby gaining acce...

SAP NetWeaver AS ABAP Memory Corruption (July 2021)

A memory corruption vulnerability exists in SAP NetWeaver AS ABAP due to buffer overflow from RFC Requests. An unauthenticated, remote attacker can exploit this by sending overlong content, crashing the corresponding work process. Note that Nessus has not tested for this issue but has instead...

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability (CNVD-2021-54404)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP Germany.A security vulnerability exists in SAP NetWeaver AS ABAP Business Server, which stems from a memory corruption vulnerability in NetWeaver ABAP Server and ABAP Platfor...

SAP NetWeaver AS ABAP Code Injection (3048657)

A code injection vulnerability exists in SAP NetWeaver Application Server ABAP Reconciliation Framework. ABAP Server and ABAP Platform may allow a high privileged attacker to inject code that can be executed by the application. An attacker could potentially delete critical information and make th...

SAP NetWeaver AS ABAP and ABAP Information Disclosure (3044754)

An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP. ABAP Server and ABAP Platform may expose functions externally that can lead to an information disclosure. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2021-33684

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77,...

CVE-2021-33684

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77,...