CVE-2022-41212

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the...

CVE-2022-41215

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

Design/Logic Flaw

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

Input validation

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the...

PT-2022-25735 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being...

CVE-2022-41214

CVE-2022-41214 affects SAP NetWeaver Application Server ABAP and ABAP Platform. The root cause, as described across multiple sources, is insufficient input validation that enables a user with high privileges to invoke a remote-enabled function to delete a file that would normally be restricted. S...

SAP NetWeaver和SAP NetWeaver Application Server 路径遍历漏洞

SAP NetWeaver and SAP NetWeaver Application Server are both products of SAP, a service-oriented, integrated application platform that provides a development environment for SAP applications. SAP NetWeaver is an integrated, service-oriented application platform that provides a development and...

CVE-2022-41215

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

SAP NetWeaver和SAP NetWeaver Application Server 输入验证错误漏洞

SAP NetWeaver and SAP NetWeaver Application Server are both products of SAP, a service-oriented, integrated application platform that provides a development environment for SAP applications. SAP NetWeaver is an integrated, service-oriented application platform that provides a development and...

CVE-2022-41212

CVE-2022-41212 affects SAP NetWeaver Application Server ABAP and ABAP Platform. The root cause is insufficient input validation that enables an attacker with high privileges to invoke a remotely enabled function to read a file that is normally restricted, compromising confidentiality. The descrip...

CVE-2022-41215

CVE-2022-41215 affects SAP NetWeaver ABAP Server and ABAP Platform. The issue is an unauthenticated URL redirection caused by insufficient URL validation, potentially tricking users into disclosing personal information. The vulnerability is categorized with CVSSv3.1 base score 4.7 (Medium) and in...

PT-2022-25734 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue is due to insufficient input validation, allowing an attacker with high-level privileges to use a remote-enabled function to delete...

CVE-2022-41212

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the...

CVE-2022-41214

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integri...

CVE-2022-35294

An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing...

CVE-2022-35294

An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing...

CVE-2022-35294

CVE-2022-35294 describes a stored XSS vulnerability in SAP NetWeaver Application Server ABAP. An attacker with basic business user privileges can craft and upload a malicious file, which is downloaded and viewed by other users, allowing information disclosure (including potential credential theft...

PT-2022-22693 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP affected versions not specified Description: The issue allows an attacker with basic business user privileges to craft and upload a malicious file, which is then downloaded and viewed by other users,...

SAP NetWeaver AS ABAP Privilege Escalation (3194674)

A privilege escalation vulnerability exists in SAP NetWeaver Application Server ABAP. This can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability. Note that Nessus has not tested for...

SAP NetWeaver AS ABAP Missing Authorization (3165801)

A missing authorization vulnerability exists in SAP NetWeaver Application Server ABAP. The application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Note that Nessus has not tested for this issue but has instead relied only on th...