CVE-2021-27610

CVE-2021-27610 affects SAP NetWeaver ABAP Server and ABAP Platform (versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804). The root cause is improper authentication due to failure to present internal and external RFC user information in a consistent, distinguished format, potential...

PT-2021-7873 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804 Description: The issue is related to improper authentication due to the inconsistent and undistinguished format of internal and...

SAP NetWeaver AS JAVA Information Disclosure (3023299)

SAP Netweaver Application Server Java versions 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 allow an attacker to access restricted information by entering malicious server name via the UserAdmin application of the SAP NetWeaver application server. Note that Nessus has not tested for this issue but has...

SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

SAP Netweaver JAVA 7.50 Missing Authorization

Onapsis Security Advisory 2021-0013: CVE-2020-26829 - Missing Authentication Check In SAP NetWeaver AS JAVA P2P Cluster communication Impact on Business A malicious unauthenticated user could abuse the lack of authentication check on SAP Java P2P cluster communication, in order to connect to the...

SAP NetWeaver AS for JAVA has a code issue vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. A code issue vulnerability exists in SAP NetWeaver AS for JAVA, which can be exploited by remote attackers to submit a special request that can bypass security restrictions and allow unauthorize...

SAP NetWeaver AS ABAP Cross-Site Scripting (XSS) (June 2021)

A reflected cross-site scripting XSS vulnerability exists in BSP-Pages within Websurvey due to improper encoding of input and output parameters. An unauthenticated, remote attacker can exploit this, to execute arbitrary script code in a user's browser session. Note that Nessus has not tested for...

SAP NetWeaver ABAP Server and ABAP Platform Memory Corruption Vulnerability (CNVD-2021-47715)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver ABAP Server and ABAP Platform, which stems from an inp...

SAP NetWeaver AS for ABAP Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP, which can be exploited by an attacker ...

SAP NetWeaver Application Server Cross-Site Scripting Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to launch a cross-site scripting attack...

SAP NetWeaver AS ABAP Command Injection (June 2021)

A command injection vulnerability exists in SAP NetWeaver AS ABAP due to improperly restricting I/O buffering. An unauthenticated, remote attacker can exploit this, to insert cleartext commands into encrypted SMTP sessions over the network which can partially impact the integrity of the...

SAP NetWeaver AS JAVA Missing XML Validation (3053066)

SAP Netweaver Application Server Java versions 7.20, 7.30, 7.31, 7.40, and 7.50 allow an attacker authenticated as an administrator to connect over a network and submit a specially crafted XML file in the application because of missing XML Validation. This vulnerability enables an attacker to ful...

SAP NetWeaver AS for ABAP Memory Corruption Vulnerability (CNVD-2021-47706)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which originates from an input validation...

SAP NetWeaver AS for ABAP Memory Corruption Vulnerability (CNVD-2021-47709)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which stems from an input validation erro...

SAP NetWeaver AS for ABAP Memory Corruption Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP. The vulnerability stems from an input...

SAP NetWeaver AS ABAP Missing Authorization (3002517)

A missing authorization vulnerability exists in SAP NetWeaver Application Server ABAP. ABAP Server and ABAP Platform may allow a low privileged attacker to execute reports by using a remote enabled function module over the network. Due to a lack of input validation the function module enables an...

SAP NetWeaver AS ABAP XSS (June 2021)

A cross-site scripting XSS vulnerability exists in SAP NetWeaver Application Server ABAP due to improper encoding of user-supplied input. An authenticated, remote attacker can exploit this, to execute arbitrary script code in a user's browser session. Note that Nessus has not tested for this issu...

SAP NetWeaver AS ABAP and ABAP Platform Authorization Issues Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authorization issue vulnerability exists in SAP NetWeaver AS ABAP and ABAP Platform, which arises from the...

SAP NetWeaver AS for ABAP Memory Corruption Vulnerability (CNVD-2021-47707)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which originates from an input validation...

SAP NetWeaver ABAP Server and ABAP Platform Memory Corruption Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver ABAP Server and ABAP Platform, which stems from an inp...