1683 matches found
PT-2021-20242
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions SAP UI - 750, 752, 753, 754, 755, SAP BASIS - 702, 731 Description: The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This...
CVE-2021-27633
CVE-2021-27633 affects SAP NetWeaver AS for ABAP (RFC Gateway). Affected components include KRNL32NUC, KRNL64NUC, KRNL64UC, and KERNEL versions listed in the SAP advisories, where an unauthenticated attacker can send a specially crafted packet over a network. The vulnerability arises from imprope...
CVE-2021-27633
SAP NetWeaver AS for ABAP RFC Gateway, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a...
CVE-2021-33663: Undefined Security Weakness
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper...
CVE-2021-21490: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver AS for ABAP Web Survey, versions - 700, 702, 710, 711, 730, 731, 750, 750, 752, 75A, 75F, does not sufficiently encode input and output parameters which results in reflected cross site scripting vulnerability, through which a malicious user can access data relating to the current...
CVE-2021-27597
The CVE-2021-27597 entry relates to SAP NetWeaver AS ABAP (RFC Gateway). Connected sourceslist concrete details: affected components include KRNL32NUC (7.22/7.22EXT), KRNL64NUC (7.22/7.22EXT/7.49), KRNL64UC (8.04/7.22/7.22EXT/7.49/7.53/7.73), and KERNEL across multiple versions (7.22, 8.04, 7.49,...
CVE-2021-27606
CVE-2021-27606 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and KERNEL series). The flaw is an input validation issue in method EncOAMParamStore() that allows an unauthenticated attacker to send a crafted...
CVE-2021-27607
Summary. CVE-2021-27607 affects SAP NetWeaver ABAP Server/Platform (Dispatcher). Multiple KRNL and KERNEL versions (e.g., KRNL32NUC 7.22/7.22EXT; KRNL64UC 7.22/7.49/7.53/7.73; KERNEL 7.22/8.04/7.49/7.53/7.73/7.77/7.81/7.82/7.83) are vulnerable. An unauthenticated attacker can send a specially cra...
CVE-2021-27628
CVE-2021-27628 affects SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher). The vulnerability stems from improper input validation in DpRTmPrepareReq(), allowing an unauthenticated attacker to send a crafted network packet that triggers an internal error, crashing the system and making it un...
CVE-2021-27630
SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) versions including KRNL32NUC (7.22, 7.22EXT), KRNL64NUC (7.22, 7.22EXT, 7.49), KRNL64UC (8.04, 7.22, 7.22EXT, 7.49, 7.53, 7.73), and KERNEL (7.22, 8.04, 7.49, 7.53, 7.73) are affected by CVE-2021-27630. An unauthenticated attacker can s...
CVE-2021-27631
CVE-2021-27631 affects SAP NetWeaver ABAP Server/Platform Enqueue Server (multiple KRNL/KERNEL versions). Root cause: improper input validation in EnqConvUniToSrvReq() permits an unauthenticated network-based packet to trigger an internal error, crash the system and cause a denial of service; no ...
CVE-2021-27629
CVE-2021-27629 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server). The root cause is improper input validation in the EncPSetUnsupported() method, allowing an unauthenticated attacker to send a crafted network packet that triggers an internal error, crashes the system, and rende...
CVE-2021-27632
CVE-2021-27632 affects SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) across multiple kernels/versions (e.g., KRNL32NUC KRNL64NUC KRNL64UC and kernels up to 8.04). The root cause is improper input validation in the EnqConvUniToSrvReq() method, allowing unauthenticated network packet...
PT-2021-17542 · Sap · Abap Platform +1
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73, 8.04 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet ov...
PT-2021-20243
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP Applications based on SAP GUI for HTML versions 7.49 through 7.84 Description: The issue arises from insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. This...
CVE-2021-27630: NULL Pointer Dereference
SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...
CVE-2021-27606: Out-of-bounds Read
SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...
CVE-2021-27597: Out-of-bounds Read
SAP NetWeaver AS for ABAP RFC Gateway, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a...
CVE-2021-33664: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver Application Server ABAP Applications based on Web Dynpro ABAP, versions - SAPUI - 750,752,753,754,755, SAPBASIS - 702, 731 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2021-27634: Out-of-bounds Write
SAP NetWeaver AS for ABAP RFC Gateway, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a...