CVE-2022-29611

SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2022-29610

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete theme data, which could result in Stored Cross-Site Scripting XSS attack...

Authorization

SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Cross site scripting

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete theme data, which could result in Stored Cross-Site Scripting XSS attack...

CVE-2022-29616

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption...

CVE-2022-29616

CVE-2022-29616 affects SAP NetWeaver AS ABAP/AS Java kernel components (versions 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04) and SAP Host Agent/SAP NetWeaver platforms. The issue is a memory corruption due to logical errors in memory management, potentially exposing user authentic...

CVE-2022-29611

CVE-2022-29611 refers to SAP NetWeaver AS ABAP/ABAP Platform missing authorization checks for an authenticated user, enabling privilege escalation. The issue is described in multiple sources as a missing authorization vulnerability within SAP NetWeaver Application Server ABAP/ABAP Platform. The p...

CVE-2022-29610

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete theme data, which could result in Stored Cross-Site Scripting XSS attack...

CVE-2022-29610

Summary: CVE-2022-29610 affects SAP NetWeaver Application Server ABAP. An authenticated attacker can upload malicious files and delete data, enabling a Stored Cross-Site Scripting (XSS) attack due to inadequate input validation. Multiple connected sources corroborate this CVE and describe the sam...

PT-2022-19724 · Sap · Sap Netweaver Application Server For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP and ABAP Platform affected versions not specified Description: The issue is related to the lack of necessary authorization checks for an authenticated user, resulting in escalation of privileges. This...

PT-2022-19729

Name of the Vulnerable Software and Affected Versions SAP Host Agent, SAP NetWeaver and ABAP Platform affected versions not specified Description The issue allows an attacker to leverage logical errors in memory management to cause a memory corruption. Recommendations At the moment, there is no...

CVE-2022-29616: Out-of-bounds Write

SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruption...

CVE-2022-29610: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete theme data, which could result in Stored Cross-Site Scripting XSS attack...

PT-2022-19723

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description The issue allows an authenticated attacker to upload malicious files and delete theme data, potentially resulting in a Stored Cross-Site Scripting XSS attack...

CVE-2022-29611: Missing Authorization

SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

SAP NetWeaver Application Server 跨站脚本漏洞

SAP NetWeaver ABAP Server is a Web application server for SAP products from SAP Germany. A cross-site scripting vulnerability exists in SAP NetWeaver ABAP Server, which stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit this...

SAP Host Agent 缓冲区错误漏洞

SAP Netweaver and SAP Host Agent are both products of SAP, a service-oriented, integrated application platform that provides a development and runtime environment for SAP applications. SAP Netweaver is an integrated, service-oriented application platform that provides a development and runtime...

SAP NetWeaver ABAP Server and ABAP Platform用户重定向漏洞

SAP Netweaver is a set of integrated service-oriented application platforms from SAP, Germany. SAP NetWeaver ABAP Server and ABAP Platform is vulnerable to user redirection, which can be exploited by unauthenticated attackers to trick users into disclosing personal information...

CVE-2022-28215

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

CVE-2022-28215

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...