CVE-2020-6193

The CVE-2020-6193 entry concerns SAP NetWeaver Knowledge Management ICE Service. Affected products/versions are SAP NetWeaver Knowledge Management ICE Service from 7.30, 7.31, 7.40, 7.50. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability exploitable by an unauthenticated attacker....

PT-2020-18993

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java Heap Dump Application versions 7.30, 7.31, 7.40, 7.50 Description The issue allows attackers to gain valuable information about the system, including hostname, server node, and installation path, through certain vulnerabl...

CVE-2020-6184: Improper Neutralization of Input During Web Page Generation

Under certain conditions, ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6187: Improper Restriction of XML External Entity Reference

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6193: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Knowledge Management ICE Service, versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6181: Undefined Security Weakness

Under some circumstances the SAML SSO implementation in the SAP NetWeaver SAPBASIS versions 702, 730, 731, 740 and SAP ABAP Platform SAPBASIS versions 750, 751, 752, 753, 754, allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response...

CVE-2020-6190: Exposure of Sensitive Information to an Unauthorized Actor

Certain vulnerable endpoints in SAP NetWeaver AS Java Heap Dump Application, versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure...

PT-2020-18988

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.40 SAP S/4HANA versions 7.50 through 7.54 Description The issue allows an authenticated attacker to store a malicious payload, resulting in a Stored Cross Site Scripting vulnerability. This occurs under certain...

PT-2020-18985

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.02 through 7.40 SAP ABAP Platform versions 7.50 through 7.54 Description The SAML SSO implementation allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Respon...

CVE-2020-6185: Improper Neutralization of Input During Web Page Generation

Under certain conditions ABAP Online Community in SAP NetWeaver SAPBASIS version 7.40 and SAP S/4HANA SAPBASIS versions 7.50, 7.51, 7.52, 7.53, 7.54, allows an authenticated attacker to store a malicious payload which results in Stored Cross Site Scripting vulnerability...

PT-2020-18987

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.40 SAP S/4HANA versions 7.50 through 7.54 Description The issue arises from insufficient encoding of user-controlled inputs, leading to a Reflected Cross-Site Scripting XSS vulnerability. This occurs under certain...

PT-2020-18996

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management ICE Service versions 7.30 through 7.50 Description The issue allows an unauthenticated attacker to execute malicious scripts, leading to a Reflected Cross-Site Scripting XSS vulnerability. This means an...

PT-2020-18990

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Guided Procedures versions 7.10 through 7.50 Description The issue arises from insufficient validation of an XML document input from a compromised admin, leading to Denial of Service. Recommendations For SAP NetWeaver Guided...

SAP NetWeaver Internet Communication Manager DoS

The vulnerability of the SAP NetWeaver Internet Communication Manager web application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2011-1517

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

Remote code execution

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

CVE-2011-1517

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

CVE-2011-1517

CVE-2011-1517 affects SAP NetWeaver Dispatcher (disp+work.exe) on SAP NetWeaver 7.0. The issue arises from the DiagTraceHex() function; a remote attacker can send a specially crafted network packet to trigger a denial of service (and in the broader advisory context, related vulnerabilities enable...

CVE-2011-1517: Undefined Security Weakness

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash...

PT-2020-7096

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description The issue is caused by an error in the DiagTraceHex function, allowing Remote Code Execution and Denial of Service. An attacker could exploit this by sending a specially-crafted packet, causing the...