CVE-2024-33001

CVE-2024-33001 concerns a Denial of Service in SAP NetWeaver and ABAP platform. The vulnerability allows an attacker to impede performance for legitimate users by crashing or flooding the SAP NetWeaver ABAP Server, leading to long response delays and potential service interruptions. The public de...

SAP NetWeaver and SAP NetWeaver ABAP Server Resource Management Error Vulnerability

SAP NetWeaver and SAP NetWeaver ABAP Server are products of SAP, Germany.SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications. SAP NetWeaver is an integrated, service-oriented application platform that provid...

CVE-2024-33001: Uncontrolled Resource Consumption

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimat...

SAP NetWeaver Application Server File Upload Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. A file upload vulnerability exists in SAP NetWeaver Application Server ABAP Platform, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely...

SAP NetWeaver AS ABAP File Upload Vulnerability (May 2024) (3448171)

The remote SAP NetWeaver ABAP server may be affected by an arbitrary file upload vulnerability. An arbitrary file upload vulnerability exists in the content repositiory due to missing a signature check. An unauthenticated, remote attacker can exploit this to upload arbitrary files on the remote...

SAP NetWeaver AS ABAP XSS (May 2024) (3450286)

The remote SAP NetWeaver ABAP server may be affected by a cross-site scripting XSS vulnerability. A cross-site scripting XSS vulnerability exists due to improper validation and encoding of untrusted data. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

CVE-2024-34687

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...

CVE-2024-34687 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...

CVE-2024-34687

CVE-2024-34687 affects SAP NetWeaver Application Server for ABAP and ABAP Platform. The vulnerability is an XSS issue caused by insufficient encoding of user-controlled inputs, potentially allowing an attacker to inject code that runs in a user’s browser. Impact aligns with the vuln description: ...

CVE-2024-34687 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application server for ABAP and ABAP Platform

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...

CVE-2024-32733

CVE-2024-32733 affects SAP NetWeaver Application Server ABAP and ABAP Platform. The issue arises from missing input validation and output encoding of untrusted data, enabling an unauthenticated attacker to inject malicious JavaScript into a dynamically crafted web page. Exploitation can lead to t...

PT-2024-26107

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP and ABAP Platform affected versions not specified Description The issue arises from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS issue. An attacker can execute...

PT-2024-24819 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform versions prior to 796 Description: The issue is caused by missing input validation and output encoding of untrusted data, allowing an unauthenticated attacker to inject malicious...

CVE-2024-34687: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...

CVE-2024-32733: Improper Neutralization of Input During Web Page Generation

Due to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject malicious JavaScript code into the dynamically crafted web page. On successful exploitation the attacker can access or modify...

PT-2024-10081

The affected software is SAP NetWeaver AS for ABAP and ABAP Platform, specifically the Internet Communication Framework. This issue arises from weak access controls, allowing attackers to access restricted information and potentially compromising application integrity, confidentiality, and...

PT-2024-4594 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and SAP NetWeaver ABAP affected versions not specified Description: The issue is related to an uncontrolled consumption of resources, which can be exploited by a remote attacker to cause a denial of service. This can lea...

SAP NetWeaver AS ABAP DoS (April 2024)

The remote SAP NetWeaver ABAP server may be affected by a denial of service DoS vulnerability. The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a...

CVE-2024-30218

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability...

CVE-2024-30218 Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability...