SAP NetWeaver AS ABAP Business Server Cross-Site Scripting Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP Business Server. The vulnerability stems from a lack of proper validation of client data by the...

CVE-2015-7968

nwbcext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbcext2int/ URI...

SAP Netweaver Application Server Java CVE-2019-0389 Remote Privilege Escalation Vulnerability

Description SAP Netweaver Application Server Java is prone to a remote privilege-escalation vulnerability. Remote attackers can exploit this issue to gain elevated privileges. Technologies Affected SAP Netweaver Application Server Java 7.1 SAP Netweaver Application Server Java 7.2 SAP Netweaver...

SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications. SAP NetWeaver Application Server AS for ABAP is an application server that runs in NetWeaver and is based on the ABAP Advanced Business Programmi...

CVE-2017-12637

Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657...

PT-2017-19211 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP version 7.40 Description: The issue allows remote authenticated users with certain privileges to cause a denial of service, resulting in a process crash. This is achieved through vectors involving disp+work.exe...

SAP NetWeaver AS ABAP Directory Traversal Vulnerability

SAP Netweaver AS ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language. A directory traversal vulnerability exists in SAP NetWeaver AS ABAP. A failure of the program to properly filter user-supplied input allows a remote attacker to use a...

SAP NetWeaver Application Server Java XML External Entity Denial of Service Vulnerability

SAP NetWeaver Application Server AS Java is an application server that runs in NetWeaver and is based on the Java programming language. A denial of service vulnerability exists in SAP NetWeaver Application Server Java. An attacker could exploit the vulnerability to cause a denial of service...

The vulnerability of the SAP NetWeaver Application Server allows a perpetrator to compromise the security of information.

The vulnerability of SAP NetWeaver Application Server is related to errors in the processing of XML requests. Exploiting this vulnerability allows a malicious actor to compromise information security by sending specially crafted TCP and XML requests remotely...

CVE-2015-2282

Stack-based buffer overflow in the LZC decompression implementation CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows...

CVE-2009-2932

Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...

CVE-2009-2932

Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...