5620 matches found
CVE-2021-33678
CVE-2021-33678 affects SAP NetWeaver AS ABAP (Reconciliation Framework) across multiple releases (700–75F). A high-privilege attacker can inject code executed by the application, potentially deleting data and causing DoS/unavailability. Affected component: Reconciliation Framework function module...
CVE-2021-33678
A function module of SAP NetWeaver AS ABAP Reconciliation Framework, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some...
CVE-2021-33670
SAP NetWeaver AS for Java Http Service Monitoring Filter (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) is vulnerable to denial of service via sending multiple HTTP requests with different method types, crashing the filter and making the server unavailable. The root cause relates to the Http...
CVE-2021-33670
SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...
CVE-2021-33677
The CVE-2021-33677 entry affects SAP NetWeaver ABAP Server and ABAP Platform, specifically versions 700, 702, 730, 731, 804, 740, 750, and 784. The issue stems from exposing internal functions externally, which can lead to information disclosure. The connected documents confirm the affected softw...
CVE-2021-33677
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure...
CVE-2021-33671
CVE-2021-33671 concerns SAP NetWeaver Guided Procedures (Administration Workset) across versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. The issue is a missing authorization check for an authenticated user, enabling privilege escalation and potential unauthorized read/modify/delete of restricted data...
CVE-2021-33671
SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...
CVE-2021-33684: Out-of-bounds Write
SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77,...
CVE-2021-33687: Exposure of Sensitive Information to an Unauthorized Actor
SAP NetWeaver AS JAVA Enterprise Portal, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as XSS to steal this information...
PT-2021-20267
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Administrator version 7.50 Description: The issue occurs when a user with insufficient privileges attempts to access any application in the Administrator applications, resulting in no security audit log being created. This impac...
PT-2021-20262 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL64NUC 7.21,...
CVE-2021-33670: Undefined Security Weakness
SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...
CVE-2021-33671: Missing Authorization
SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...
PT-2021-20249
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Guided Procedures Administration Workset versions 7.10 through 7.50 Description: The issue results from the lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could allow...
PT-2021-20256 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Reconciliation Framework versions 700 through 75F Description: A function module in the Reconciliation Framework of SAP NetWeaver AS ABAP allows a high-privileged attacker to inject code that can be executed by the...
PT-2021-20255 · Sap · Sap Netweaver Abap Server +1
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 702, 730, 731, 740, 750, 784 Description: The issue allows external exposure of functions, which can lead to information disclosure. Recommendations: For SAP NetWeaver ABAP Server and...
PT-2021-20265
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA Enterprise Portal versions 7.10 through 7.50 Description: The issue reveals sensitive information in one of its HTTP requests. An attacker can use this in conjunction with other attacks, such as XSS, to steal this...
CVE-2021-33678: Improper Neutralization of Directives in Dynamically Evaluated Code
A function module of SAP NetWeaver AS ABAP Reconciliation Framework, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some...
CVE-2021-33677: Undefined Security Weakness
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure...