CVE-2023-24527 Improper Access Control in SAP NetWeaver AS Java for Deploy Service

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

SAP NetWeaver Enterprise Portal 访问控制错误漏洞

SAP NetWeaver Enterprise Portal is a SAP NetWeaver Web front-end component from SAP Germany. A security vulnerability exists in SAP NetWeaver Enterprise Portal, which can be exploited by remote attackers to submit a special request for unauthorized access to the system...

CVE-2023-29186: Improper Limitation of a Pathname to a Restricted Directory

In SAP NetWeaver BI CONT ADDON - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient administrative privileges then potentially critical OS files ca...

SAP NetWeaver 路径遍历漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP. SAP NetWeaver BI CONT ADDON has a directory traversal vulnerability, which can be exploited by remote attackers to submit special requests that can read system files in system context and obtain sensitive...

CVE-2023-28761: Missing Authentication for Critical Function

In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service which will enable them to access or modify server settings and data, leading to limited impact on confidentiality and integrity...

SAP NetWeaver AS 资源管理错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. A resource management error vulnerability exists in SAP NetWeaver AS for ABAP Business Server Pages, which arises from uncontrolled resource...

PT-2023-21943 · Sap · Sap Netweaver Enterprise Portal

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Enterprise Portal version 7.50 Description: An unauthenticated attacker can attach to an open interface and make use of an open API to access a service, enabling them to access or modify server settings and data. This leads to...

SAP NetWeaver AS 资源管理错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but is also the basic platform for SAP software. A resource management error vulnerability exists in SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756,...

PT-2023-19675 · Sap · Sap Netweaver As Java For Deploy Service

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java for Deploy Service version 7.5 Description: The issue allows an unauthenticated attacker to access server settings and data without modifying them, as the system does not perform access control checks for certain...

CVE-2023-29185: Uncontrolled Resource Consumption

SAP NetWeaver AS for ABAP Business Server Pages - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources...

CVE-2023-28763: Uncontrolled Resource Consumption

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters which can consume the server's resources sufficiently to make it unavailable over the...

PT-2023-21945 · Sap · Sap Netweaver As For Abap/Abap Platform

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791 Description: The issue allows an attacker authenticated as a non-administrative user to craft a request with certain parameters, which can...

PT-2023-22188 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP Business Server Pages versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757 Description: The issue allows an attacker authenticated as a non-administrative user to craft a request with certain...

SAP NetWeaver AS 访问控制错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. An access control error vulnerability exists in SAP NetWeaver AS Java for Deploy Service version 7.5, which stems from not performing any access contr...

CVE-2023-24527: Missing Authentication for Critical Function

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

PT-2023-22189 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver BI CONT ADDON versions 707, 737, 747, 757 Description: The issue allows an attacker to exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Although data cannot be read, a remote attack...

SAP NetWeaver AS ABAP Path Traversal

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP programming integration platforms is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to re-record arbitrary files remotely...

SAP NetWeaver AS for Java Auth Bypass

The vulnerability of the SAP NetWeaver AS for Java software platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data, or cause service interruptions...

SAPRSBRO Component File Re-record

The vulnerability of the SAPRSBRO component in SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to re-record arbitrary...

SAP NetWeaver AS Licensing Issue Vulnerability

SAP NetWeaver AS is a SAP Web Application Server from SAP Germany. It not only provides network services, but also is the basic platform for SAP software. SAP NetWeaver AS version 7.50 has an authorization problem vulnerability, which stems from the lack of authentication checks and can be...