CVE-2013-6244

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

The vulnerability of the SAP NetWeaver software integration platform, related to deficiencies in the authorization process, allows a perpetrator to gain read access to system data.

The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to system data remotely...

The vulnerability of the Adobe Document Service component in SAP NetWeaver AS Java software integration platforms allows attackers to gain access to and modify system data.

The vulnerability of the Adobe Document Service component in SAP NetWeaver AS Java software integration platforms is related to its dependence on a vulnerable external component. Exploiting this vulnerability can allow attackers to gain access to and modify system data...

The vulnerability of SAP NetWeaver Application Server Java, related to deficiencies in authentication procedures, allows attackers to gain read access to data.

The vulnerability of the SAP NetWeaver Application Server Java server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to data remotely...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL during page loading, causing it to go to an unreliable website. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL to an unreliable website when loading the login page. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

The vulnerability of the SAP NetWeaver ABAP software integration platform lies in the insufficient protection of the web page structure, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to incorrect privilege assignment, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions, allowing attackers to circumvent existing security restrictions.

The vulnerability of SAP NetWeaver Internet Communication Framework web applications lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

The vulnerability of SAP NetWeaver web application servers’ Internet Communication Manager and SAP Web Dispatcher, related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SAP NetWeaver Internet Communication Manager and SAP Web Dispatcher web applications is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging purposes. Exploiting this vulnerability can allow attackers to compromise the...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of SAP NetWeaver web application servers, such as the SAP NetWeaver Internet Communication Manager and the SAP Content Server, as well as the SAP Web Dispatcher, relates to the issue of writing beyond the buffer boundaries, allowing attackers to compromise the accessibility of protected information.

The vulnerability of SAP NetWeaver web application servers, such as the SAP NetWeaver Internet Communication Manager and the SAP Content Server, as well as the SAP Web Dispatcher, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the SAP NetWeaver software integration platform, related to uncontrolled resource consumption, allows a perpetrator to cause service interruptions.

The vulnerability of the SAP NetWeaver software integration platform is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SAP NetWeaver ABAP software integration platform, related to the lack of authentication, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Service Data Control Center (SDCCN) tool in SAP NetWeaver and ABAP Platform software integration platforms allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Service Data Control Center SDCCN tool in SAP NetWeaver and ABAP Platform software integration platforms is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...

The vulnerability of the SAP NetWeaver AS ABAP software integration platform lies in the lack of password masking for fields, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver AS ABAP software integration platform is related to the absence of password field masking. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SAP NetWeaver Enterprise Portal (SAP NW EP) software integration platform lies in the insufficient protection of operational data during code debugging, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform SAP NW EP is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Vulnerabilities fixed in SAP Software

SAP has fixed multiple vulnerabilities in several products, including SAP Solution Manager, SAP jConnect, SAP Web Dispatcher, SAP NetWeaver, SAP S/4 HANA Private Cloud, and SAP BusinessObjects. The vulnerabilities include code injection, deserialization, and insufficient input validation, which c...

SAP NetWeaver AS Missing Authentication (December 2025)

The version of SAP NetWeaver Application Server detected on the remote host is affected by a missing authentication vulnerability as disclosed in the SAP Security Patch Day December 2025: - The SAP Internet Communication Framework does not conduct any authentication checks for features that need...