CVE-2021-40499

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

Design/Logic Flaw

SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2021-40495

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application...

CVE-2021-40499

CVE-2021-40499 affects SAP NetWeaver Application Server for ABAP (ABAP) printing services: SAP Cloud Print Manager and SAPSprint. The NVD entry states that versions 7.70, 7.70 PI, and 7.70 BYD are vulnerable to a code injection that can be executed by the application, allowing an attacker to cont...

CVE-2021-38178

CVE-2021-38178 affects SAP NetWeaver AS ABAP and ABAP Platform versions 700–756. The vulnerability allows a malicious user to transfer ABAP code artifacts or content by bypassing the established quality gates, enabling code to reach quality and production and potentially compromising confidential...

CVE-2021-38178

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious...

CVE-2021-40495

There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application...

CVE-2021-40495

CVE-2021-40495 : Multiple Denial-of-Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform (versions 740–755). An unauthenticated attacker can exploit the public SICF endpoint /sap/public/bc/abap to degrade performance of SAP NetWeaver AS ABAP/ABAP Platform. The Do...

CVE-2021-38181

CVE-2021-38181 affects SAP NetWeaver AS ABAP and ABAP Platform versions 700–756. The issue enables a remote attacker to deny service to legitimate users by crashing or flooding the server (DoS). Root cause is a vulnerability in the ABAP/NetWeaver components; exploited over network with no authent...

CVE-2021-38181

SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

PT-2021-6087 · Sap · Sap Netweaver As Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756 Description: The software logistics system enables a malicious user to transfer ABAP code artifacts or content, bypassing th...

PT-2021-21990 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions 700 through 756 Description: The issue allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Recommendations: For versions 700...

PT-2021-22901 · Sap · Sap Netweaver Application Server For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755 Description: The issue involves multiple Denial-of-Service vulnerabilities. An unauthorized attacker can utilize the public SICF service...

CVE-2021-38176

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

Input validation

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

CVE-2021-38176

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could...

CVE-2021-38176

The connected documents confirm a concrete vulnerability: CVE-2021-38176 affects SAP NZDT (a conversion/deployment of SAP S/4HANA 1809 to AWS). The root cause is improper input sanitization in NZDT function modules, allowing an authenticated user with certain privileges to remotely invoke these m...

SAP NetWeaver AS ABAP Memory Corruption (July 2021)

A memory corruption vulnerability exists in SAP NetWeaver AS ABAP due to buffer overflow from RFC Requests. An unauthenticated, remote attacker can exploit this by sending overlong content, crashing the corresponding work process. Note that Nessus has not tested for this issue but has instead...

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability (CNVD-2021-54404)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP Germany.A security vulnerability exists in SAP NetWeaver AS ABAP Business Server, which stems from a memory corruption vulnerability in NetWeaver ABAP Server and ABAP Platfor...

SAP NetWeaver AS ABAP Code Injection (3048657)

A code injection vulnerability exists in SAP NetWeaver Application Server ABAP Reconciliation Framework. ABAP Server and ABAP Platform may allow a high privileged attacker to inject code that can be executed by the application. An attacker could potentially delete critical information and make th...