CVE-2022-26103

The CVE-2022-26103 entry relates to SAP NetWeaver (Real Time Messaging Framework) version 7.50. The connected documents corroborate a vulnerability where under certain conditions an attacker can access information, enabling information gathering for further exploits. Affected component: Real Time...

CVE-2022-26103

Under certain conditions, SAP NetWeaver Real Time Messaging Framework - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks...

CVE-2022-24395

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2022-24395

CVE-2022-24395 affects SAP NetWeaver Enterprise Portal across versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. The vulnerability arises from insufficient encoding of user-controlled inputs, leading to a reflected XSS condition. The issue is consistently described across multiple sources (NV...

CVE-2022-26102

CVE-2022-26102 affects SAP NetWeaver Application Server for ABAP in versions 700, 701, 702, and 731, due to a missing authorization check that allows an authenticated attacker to access content on the start screen of any transaction within the same SAP system, even when not authorized for that tr...

CVE-2022-26102

Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transactio...

PT-2022-17672 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP versions 700, 701, 702, 731 Description: The issue is due to a missing authorization check, allowing an authenticated attacker to access content on the start screen of any transaction within the same...

The vulnerabilities of the SAP NetWeaver software integration platform, the SAP Content Server content server, and the SAP Web Dispatcher web dispatcher are related to deficiencies in HTTP request processing. This allows attackers to inject arbitrary code.

The vulnerability of the execute function in SAP software, specifically SAP ContentServer, and the software of SAP NetWeaver – the Content Server and the SAP Web Dispatcher – are related to HTTP request processing vulnerabilities. Exploiting these vulnerabilities allows a malicious actor to injec...

The vulnerability of the software development service provided by SAP NetWeaver Development Infrastructure allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software development service for SAP NetWeaver Development Infrastructure lies in the insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information or cause service failures...

SAP NetWeaver AS JAVA XML External Entity Injection (CVE-2016-9563)

An XML external entity injection vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

SAP NetWeaver Application Server Remote Code Execution (CVE-2022-22536)

A remote code execution vulnerability exists in SAP NetWeaver Application Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms, related to incorrect authorization, allows attackers to execute arbitrary code.

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SAP NetWeaver AS ABAP Multiple Vulnerabilities (Feb 2022)

Multiple vulnerabilities may be present in SAP NetWeaver Application Server ABAP, including the following: - SAP Netweaver AS - versions 700, 701, 702, 710, 711, 730, 740, 750, 751, 752, 753, 754, 755, 756 - contain a cross-site scripting vulnerability that allows an unauthenticated attacker to...

SAP Business Objects Web Intelligence跨站脚本漏洞

SAP Business Objects Web Intelligence is a centralized suite from SAP, a German company used for data reporting, visualization and sharing. SAP Business Objects Web Intelligence is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to compromise vulnerable...

SAP Solution Manager has an unspecified vulnerability

SAP Solution Manager is a system management platform from SAP Germany that integrates system monitoring, SAP support desktops, self-service, ASAP implementation, etc. SAP Solution Manager has a security vulnerability that can be exploited by attackers to compromise vulnerable systems, including...

SAP NetWeaver Application Server ABAP and ABAP Platform信息泄露漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany.An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP and ABAP Platform, which can be exploited by attackers to read connection details stored in SAP The vulnerability can be exploited to...

SAP NetWeaver AS SQL Injection Vulnerability

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. SAP NetWeaver AS has a SQL injection vulnerability that can be exploited by attackers to threaten vulnerable systems, including Business Objects, SAP...

CVE-2022-22545

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756...

CVE-2022-22545

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756...

CVE-2022-22543

SAP NetWeaver Application Server for ABAP Kernel and ABAP Platform Kernel - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a...