CVE-2023-23858

CVE-2023-23858 affects SAP NetWeaver AS for ABAP and ABAP Platform (versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790). Root cause: insufficient input validation that allows an unauthenticated attacker to craft a URL which, when clicked by a user, may direct the user to an external l...

CVE-2023-23854

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2023-23854

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2023-23854

CVE-2023-23854 affects SAP NetWeaver AS ABAP/ABAP Platform versions 700, 701, 702, 731, 740, 750, 751, 752. The root cause is lack of proper authorization checks for an authenticated user, enabling escalation of privileges. Documents from multiple sources (Red Hat, NVD, CNNVD, Nessus plugin summa...

CVE-2023-23853

An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could rea...

CVE-2023-23853

An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could rea...

CVE-2023-23853

CVE-2023-23853 affects SAP NetWeaver Application Server for ABAP and ABAP Platform (versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790). The vulnerability allows an unauthenticated attacker to craft a link that, when clicked by a user, redirects to a malicious site that...

SAP NetWeaver AS 跨站脚本漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789,...

SAP NetWeaver Application Server 输入验证错误漏洞

SAP NetWeaver Application Server is an application server from SAP. SAP NetWeaver Application Server for ABAP and ABAP Platform versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, An input validation error vulnerability exists in version 790. An attacker could use this...

PT-2023-19260 · Sap · Sap Netweaver As Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790 Description: The issue allows an unauthenticated attacker to craft a link, which when clicked by an unsuspecting user, can be used to...

PT-2023-19259 · Sap · Sap Netweaver As For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790 Description: The issue allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can ...

Vulnerabilities fixed in SAP products

SAP has released updates for several products, including SAP BASIS, Netweaver, HAMA, Business Planning & Consolidation, SAP CRM and SAP Solution Manager. A malicious party could potentially exploit and cause damage in the following categories: Cross-Site Scripting XSS Bypassing authentication...

PT-2023-19669 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP BSP Framework versions 700 through 757 Description: The issue is caused by insufficient input sanitization, allowing an unauthenticated user to alter the current session of the user by injecting malicious code over the...

SAP NetWeaver AS 跨站脚本漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but is also the basic platform for SAP software. A cross-site scripting vulnerability exists in SAP NetWeaver AS ABAP BSP Framework versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755,...

PT-2023-19254 · Sap · Sap Netweaver Application Server For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: AP NetWeaver Application Server for ABAP and ABAP Platform versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790 Description: An unauthenticated attacker can craft a link that, when clicked by an unsuspecting user, can...

SAP NetWeaver AS 跨站脚本漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but is also the basic platform for SAP software. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757,...

PT-2023-19258 · Sap · Sap Netweaver As Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790 Description: The issue is caused by insufficient input validation, allowing an unauthenticated attacker to send a crafted URL to a user...

SAP NetWeaver AS 输入验证错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. An input validation error vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform. An attacker could use this vulnerability to redirect...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server for ABAP and ABAP Platform versions 700, 701, 702, 731, 740, 750, 751, and 752, which stems from a lack of authorization checking for users. An attacker...

PT-2023-19670 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Business Server Pages versions 700, 701, 702, 731, 740 Description: The issue is caused by insufficient input sanitization, allowing an unauthenticated user to alter the current session of the user by injecting malicious...