Cross site scripting

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2021-33703

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting XSS vulnerability...

Cross site scripting

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets...

Code injection

SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity...

CVE-2021-33702

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets...

CVE-2021-33702

CVE-2021-33702 affects SAP NetWeaver Enterprise Portal (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50). The issue arises from insufficient encoding of report data in one of the portal’s servlets, allowing an attacker to inject malicious data that, when a report is opened, executes a script in...

CVE-2021-33703

The CVE-2021-33703 vulnerability affects SAP NetWeaver Enterprise Portal (versions 7.30, 7.31, 7.40, 7.50). Root cause: inadequate encoding of URL parameters in portal servlets, enabling an attacker to craft a malicious link that causes a Reflected XSS when a user visits the link. Impact describe...

CVE-2021-33703

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2021-33707

SAP NetWeaver Knowledge Management is affected by CVE-2021-33707, a URL-redirection flaw where a stored URL in a component enables remote attackers to redirect users to arbitrary sites and conduct phishing, compromising confidentiality and integrity. The vulnerability is described across multiple...

CVE-2021-33707

SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity...

SAP Netweaver 跨站脚本漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP Netweaver, which can be exploited by an attacker to craft a...

SAP Netweaver 输入验证错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform primarily provides a development and runtime environment for SAP applications. An input validation error vulnerability exists in SAP NetWeaver Knowledge Management, which allows...

SAP NetWeaver 代码问题漏洞

SAP NetWeaver Development Infrastructure is a SAP company that provides a consistent development environment, development team, and support for software development throughout the product lifecycle. A code issue vulnerability exists in SAP NetWeaver Development Infrastructure, which is due to...

SAP NetWeaver 跨站脚本漏洞

SAP NetWeaver Development Infrastructure is a SAP company that provides a consistent development environment, development teams, and support for software development throughout the product lifecycle. A cross-site scripting vulnerability exists in SAP NetWeaver Development Infrastructure, which...

SAP NetWeaver AS ABAP Memory Corruption (July 2021)

A memory corruption vulnerability exists in SAP NetWeaver AS ABAP due to buffer overflow from RFC Requests. An unauthenticated, remote attacker can exploit this by sending overlong content, crashing the corresponding work process. Note that Nessus has not tested for this issue but has instead...

SAP NetWeaver AS Missing Authorization Check (3059446)

A missing authorization check vulnerability exists in the Administration Workset of the SAP NetWeaver Guided Procedures versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. An authenticated, remote attacker can exploit this, to escalate privileges and allow an unauthorized user the ability to...

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability (CNVD-2021-54404)

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP Germany.A security vulnerability exists in SAP NetWeaver AS ABAP Business Server, which stems from a memory corruption vulnerability in NetWeaver ABAP Server and ABAP Platfor...

SAP Netweaver Input Validation Error Vulnerability (CNVD-2021-54402)

SAP Netweaver is a service oriented, integrated application platform from SAP Germany that provides a development and runtime environment for SAP applications. SAP Netweaver is vulnerable to an input validation error that results from a network system or product that does not properly validate da...

SAP NetWeaver Input Validation Error Vulnerability (CNVD-2021-54403)

SAP Netweaver is a service oriented, integrated application platform from SAP Germany that provides a development and runtime environment for SAP applications. The platform provides a development and runtime environment for SAP applications.SAP NetWeaver suffers from an input validation error...

SAP NetWeaver AS JAVA Information Disclosure Vulnerability (CNVD-2022-69287)

SAP NetWeaver AS is a SAP web application server from SAP, a German company. SAP NetWeaver AS JAVA has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information in HTTP requests...