Lucene search
+L

4666 matches found

CNNVD
CNNVD
added 2021/06/08 12:0 a.m.9 views

SAP NetWeaver AS ABAP Business Server 缓冲区错误漏洞

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP Germany.A security vulnerability exists in SAP NetWeaver AS ABAP Business Server, which stems from a memory corruption vulnerability in NetWeaver ABAP Server and ABAP Platfor...

7.5CVSS5.7AI score0.01508EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.11 views

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A memory corruption vulnerability exists in SAP NetWeaver AS for ABAP, which stems from an input validation erro...

7.5CVSS5.7AI score0.01508EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.11 views

SAP NetWeaver AS ABAP Business Server 跨站脚本漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP, which can be exploited by an attacker ...

6.1CVSS5.3AI score0.00585EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.9 views

SAP Netweaver 命令注入漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A command injection vulnerability exists in SAP NetWeaver AS ABAP, which can be exploited by an attacker to inse...

5.8CVSS5.8AI score0.00766EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.8 views

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is a service oriented, integrated application platform from SAP Germany that provides a development and runtime environment for SAP applications. SAP Netweaver is vulnerable to an input validation error that results from a network system or product that does not properly validate da...

7.5CVSS6AI score0.01325EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.7 views

SAP NetWeaver Application Server 跨站脚本漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to launch a cross-site scripting attack...

5.4CVSS5.2AI score0.00473EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/05/21 12:0 a.m.43 views

SAP NetWeaver AS ABAP Command Injection (May 2021)

A command injection vulnerability exists in SAP NetWeaver Application Server ABAP due to a flaw in the RDDPUTJR program. An authenticated, local attacker can exploit this, by executing an ABAP report when the attacker has access to the local SAP system, to execute arbitrary command or create a...

8.2CVSS7.5AI score0.0027EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/05/12 12:0 a.m.46 views

SAP NetWeaver AS ABAP Code Injection Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

8.2CVSS7.2AI score0.0027EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/11 3:15 p.m.5 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

6.7CVSS5.9AI score0.0027EPSS
SaveExploits0References2
NVD
NVD
added 2021/05/11 3:15 p.m.38 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/11 3:15 p.m.20 views

Denial of service

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

4.6CVSS6.4AI score0.0027EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/05/11 3:15 p.m.6 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS7.2AI score0.0027EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/05/11 2:19 p.m.57 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS6.5AI score0.0027EPSS
SaveExploits0References2
CVE
CVE
added 2021/05/11 2:19 p.m.60 views

CVE-2021-27611

CVE-2021-27611 affects SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731. The vulnerability enables a high-privileged, local attacker to inject malicious code by executing an ABAP report on a local SAP system, with potential data access/overwrite and denial of service. Root cause cited acros...

8.2CVSS6.3AI score0.0027EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.14 views

PT-2021-17546 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731 Description: The issue allows a high-privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. This could lead to...

8.2CVSS7.1AI score0.0027EPSS
SaveExploits0References3
NCSC
NCSC
added 2021/05/11 12:0 a.m.9 views

Vulnerability fixed in SAP NetWeaver

A vulnerability has been fixed in SAP NetWeaver. The vulnerability allows a malicious party to remotely execute arbitrary code execute. As usual, SAP is making few details publicly available. SAP has released updates to fix the vulnerabilities. More information can be found at:...

8.2CVSS6.9AI score0.0027EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.11 views

SAP NetWeaver AS ABAP Business Server 代码注入漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

8.2CVSS5.8AI score0.0027EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/04/30 12:0 a.m.15 views

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-36683)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management 710, 710.750, which can be exploited by an attacker to gain access to highly sensitive da...

8.3CVSS6.5AI score0.00422EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.13 views

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform allows a hacker to inject arbitrary code.

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

8.7CVSS7.6AI score0.01327EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform allows a perpetrator to gain access, modify, or make existing files inaccessible.

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform is related to the absence of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to remotely gain access, modify, or make existing files inaccessible using a...

7.5CVSS6.9AI score0.00934EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder