Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1338 matches found

NVD
NVD•added 2020/05/12 6:15 p.m.•30 views

CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

7.5CVSS6AI score0.01386EPSS
SaveExploits0References2
Prion
Prion•added 2020/05/12 6:15 p.m.•21 views

Denial of service

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

5CVSS7.6AI score0.01386EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB•added 2020/05/12 6:15 p.m.•5 views

CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

7.5CVSS6AI score0.01386EPSS
SaveExploits0References3Affected Software2
CVE
CVE•added 2020/05/12 5:51 p.m.•71 views

CVE-2020-6262

The CVE-2020-6262 entry concerns SAP Application Server ABAP (ST-PI) with vulnerable releases before 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740. The underlying issue is a code injection flaw in Service Data Download that could allow an attacker to inject and execute code with...

9.9CVSS8.6AI score0.01174EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2020/05/12 5:46 p.m.•81 views

CVE-2020-6240

This CVE concerns SAP NetWeaver AS ABAP (Web Dynpro ABAP). The vulnerability allows an unauthenticated attacker to deny service to legitimate users by crashing or flooding the affected system. Affected components/versions identified across sources include SAP_UI 750, 752, 753, 754 and SAP_BASIS 7...

7.5CVSS7.5AI score0.01386EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2020/05/12 5:46 p.m.•32 views

CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

5.3CVSS7.6AI score0.01386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2020/05/12 12:00 a.m.•9 views

PT-2020-19036 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Web Dynpro ABAP versions SAP UI 750, 752, 753, 754 and SAP BASIS 700, 710, 730, 731, 804 Description: The issue allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing ...

7.5CVSS5.5AI score0.01386EPSS
SaveExploits0References4
NVD
NVD•added 2020/04/24 11:15 p.m.•27 views

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

6.1CVSS5.9AI score0.00781EPSS
SaveExploits0References2
Prion
Prion•added 2020/04/24 11:15 p.m.•23 views

Cross site scripting

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

4.3CVSS5.9AI score0.00781EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2020/04/24 10:17 p.m.•123 views

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages SBSPEXT_PHTMLB (versions 700–754, 730–731, etc.) is affected by a reflected Cross-Site Scripting (XSS) vulnerability due to insufficient encoding of user-controlled inputs in URL parameters. Root cause: improper input encoding in the SBSPEXT_PHTMLB test...

6.1CVSS5.9AI score0.00781EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2020/04/24 10:17 p.m.•30 views

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

6.1CVSS6AI score0.00781EPSS
SaveExploits0References2
CNVD
CNVD•added 2020/04/23 12:00 a.m.•10 views

SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability (CNVD-2020-32898)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB. The vulnerability stems from the WEB...

6.1CVSS6.3AI score0.00781EPSS
SaveExploits0References1
CNVD
CNVD•added 2020/04/15 12:00 a.m.•8 views

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. An input validation error vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application IT00. The vulnerability stems from the network system...

6.1CVSS6.8AI score0.01513EPSS
SaveExploits1References1
CNVD
CNVD•added 2020/04/15 12:00 a.m.•8 views

SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages. The vulnerability stems from a lack of proper validation of client-side...

6.1CVSS6.3AI score0.00654EPSS
SaveExploits0References1
NVD
NVD•added 2020/04/14 8:15 p.m.•32 views

CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

6.1CVSS6.2AI score0.01513EPSS
SaveExploits1References4
OSV
OSV•added 2020/04/14 8:15 p.m.•9 views

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS6.3AI score0.00654EPSS
SaveExploits0References2
NVD
NVD•added 2020/04/14 8:15 p.m.•31 views

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.00654EPSS
SaveExploits0References2
OSV
OSV•added 2020/04/14 8:15 p.m.•10 views

CVE-2020-6215

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

6.1CVSS6.2AI score0.01513EPSS
SaveExploits1References4
Prion
Prion•added 2020/04/14 8:15 p.m.•28 views

Design/Logic Flaw

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection...

5.8CVSS6.1AI score0.01513EPSS
SaveExploits1References4Affected Software1
Prion
Prion•added 2020/04/14 8:15 p.m.•21 views

Cross site scripting

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

4.3CVSS5.9AI score0.00654EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder