CVE-2022-28215

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

CVE-2022-28215

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

CVE-2022-26105

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modif...

CVE-2022-26105

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modif...

Design/Logic Flaw

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

Design/Logic Flaw

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modif...

CVE-2022-28215

CVE-2022-28215 affects SAP NetWeaver ABAP Server and ABAP Platform versions 740, 750, 787. It enables an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation, potentially tricking users into disclosing personal information. Remediation information is a...

CVE-2022-28215

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose personal information...

CVE-2022-27669

CVE-2022-27669 concerns SAP NetWeaver Application Server for Java 7.50, where an unauthenticated user can abuse the XML Data Archiving Service due to a lack of authentication checks, potentially causing privilege escalation. Multiple connected sources (Red Hat, CNVD, CVE listing, and NCSC overvie...

CVE-2022-27669

An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to which access should be restricted. This may result in an escalation of privileges...

CVE-2022-26105

CVE-2022-26105 affects SAP NetWeaver Enterprise Portal versions 7.10 through 7.50. The issue is described as an unauthenticated script execution vulnerability due to improper sanitization of user inputs during network interaction, leading to potential view/modify of information with limited impac...

CVE-2022-26105

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the Network. On successful exploitation, an attacker can view or modif...

SAP Web Dispatcher 缓冲区错误漏洞

SAP Web dispatcher and SAP Internet Communication Manager SAP ICM are both products of SAP Germany. SAP Internet Communication Manager is a component of the SAP NetWeaver application server. It is used to receive and send Web requests HTTP, HTTPS, SMTP.A buffer overflow vulnerability exists in SA...

PT-2022-18880 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 740, 750, 787 Description: The issue allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked t...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP Germany. SAP NetWeaver Application Server elevation of privilege vulnerability, which stems from a lack of authentication checks in the XML data archiving service, can be exploited by an attacker to cause an elevation of privilege...

SAP NetWeaver ABAP Server 输入验证错误漏洞

SAP Netweaver is a set of integrated service-oriented application platforms from SAP, Germany. SAP NetWeaver ABAP Server and ABAP Platform is vulnerable to user redirection, which can be exploited by unauthenticated attackers to trick users into disclosing personal information...

Exploit for HTTP Request Smuggling in Sap Content_Server

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-...

SAP NetWeaver Application Server Cross-Site Scripting Vulnerability (CNVD-2022-63625)

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by attackers to conduct cross-site scripting XSS attacks...