CVE-2022-24397

SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability.This reflected cross-site scripting attack can be used to non-permanently deface or modify displayed content of...

PT-2022-16672

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions 7.30, 7.31, 7.40, 7.50 Description The issue arises from insufficient encoding of user-controlled inputs, resulting in a reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be...

CVE-2022-24397: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability.This reflected cross-site scripting attack can be used to non-permanently deface or modify displayed content of...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server for ABAP, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2022-26103

The CVE-2022-26103 entry relates to SAP NetWeaver (Real Time Messaging Framework) version 7.50. The connected documents corroborate a vulnerability where under certain conditions an attacker can access information, enabling information gathering for further exploits. Affected component: Real Time...

CVE-2022-26103

Under certain conditions, SAP NetWeaver Real Time Messaging Framework - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks...

CVE-2022-24395

CVE-2022-24395 affects SAP NetWeaver Enterprise Portal across versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50. The vulnerability arises from insufficient encoding of user-controlled inputs, leading to a reflected XSS condition. The issue is consistently described across multiple sources (NV...

CVE-2022-24395

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2022-26102

CVE-2022-26102 affects SAP NetWeaver Application Server for ABAP in versions 700, 701, 702, and 731, due to a missing authorization check that allows an authenticated attacker to access content on the start screen of any transaction within the same SAP system, even when not authorized for that tr...

CVE-2022-26102

Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transactio...

PT-2022-16670

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions 7.10 through 7.50 Description The issue arises from insufficient encoding of user-controlled inputs, leading to a reflected Cross-Site Scripting XSS issue. This means an attacker could potentially injec...

CVE-2022-26102: Missing Authorization

Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transactio...

PT-2022-17673

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.50 Description The issue allows an attacker to access information under certain conditions, which could lead to information gathering for further exploits and attacks. Recommendations For version 7.50, update to a versi...

PT-2022-17672 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP versions 700, 701, 702, 731 Description: The issue is due to a missing authorization check, allowing an authenticated attacker to access content on the start screen of any transaction within the same...

CVE-2022-24395: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2022-26103: Missing Authorization

Under certain conditions, SAP NetWeaver Real Time Messaging Framework - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks...

SAP NetWeaver Development Infrastructure Information Disclosure

The vulnerability of the software development service for SAP NetWeaver Development Infrastructure lies in the insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information or cause service failures...

SAP NetWeaver HTTP Request Processing Code Injection

The vulnerability of the execute function in SAP software, specifically SAP ContentServer, and the software of SAP NetWeaver – the Content Server and the SAP Web Dispatcher – are related to HTTP request processing vulnerabilities. Exploiting these vulnerabilities allows a malicious actor to injec...

SAP NetWeaver AS JAVA XML External Entity Injection (CVE-2016-9563)

An XML external entity injection vulnerability exists in SAP NetWeaver. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

SAP NetWeaver Application Server Remote Code Execution (CVE-2022-22536)

A remote code execution vulnerability exists in SAP NetWeaver Application Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...