Lucene search
+L

4639 matches found

NVD
NVD
added 2021/05/11 3:15 p.m.38 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS0.0027EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/11 3:15 p.m.5 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

6.7CVSS5.9AI score0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/11 3:15 p.m.20 views

Denial of service

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

4.6CVSS6.4AI score0.0027EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/05/11 3:15 p.m.5 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS7.2AI score0.0027EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/05/11 2:19 p.m.57 views

CVE-2021-27611

SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to data, overwrite them, or execute a denial of service...

8.2CVSS6.5AI score0.0027EPSS
SaveExploits0References2
CVE
CVE
added 2021/05/11 2:19 p.m.60 views

CVE-2021-27611

CVE-2021-27611 affects SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731. The vulnerability enables a high-privileged, local attacker to inject malicious code by executing an ABAP report on a local SAP system, with potential data access/overwrite and denial of service. Root cause cited acros...

8.2CVSS6.3AI score0.0027EPSS
SaveExploits0References2Affected Software1
NCSC
NCSC
added 2021/05/11 12:0 a.m.8 views

Vulnerability fixed in SAP NetWeaver

A vulnerability has been fixed in SAP NetWeaver. The vulnerability allows a malicious party to remotely execute arbitrary code execute. As usual, SAP is making few details publicly available. SAP has released updates to fix the vulnerabilities. More information can be found at:...

8.2CVSS6.9AI score0.0027EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.14 views

PT-2021-17546 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 700, 701, 702, 730, 731 Description: The issue allows a high-privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. This could lead to...

8.2CVSS7.1AI score0.0027EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.11 views

SAP NetWeaver AS ABAP Business Server 代码注入漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code injection vulnerability exists in SAP NetWeaver AS ABAP versions 700, 701, 702, 730, and 731. An attacker...

8.2CVSS5.8AI score0.0027EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/04/30 12:0 a.m.15 views

SAP NetWeaver Master Data Management Information Disclosure Vulnerability (CNVD-2021-36683)

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management 710, 710.750, which can be exploited by an attacker to gain access to highly sensitive da...

8.3CVSS6.5AI score0.00422EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.13 views

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform allows a hacker to inject arbitrary code.

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

8.7CVSS7.6AI score0.01327EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.7 views

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform allows a perpetrator to gain access, modify, or make existing files inaccessible.

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform is related to the absence of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to remotely gain access, modify, or make existing files inaccessible using a...

7.5CVSS6.9AI score0.00934EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.12 views

The vulnerability of SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS8.1AI score0.94719EPSS
SaveExploits6References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.9 views

The vulnerability of the ENGINEAPI component of the SAP NetWeaver Java Application Server web application server allows a attacker to cause a service failure.

The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.018EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/04/19 12:0 a.m.9 views

SAP Netweaver Information Disclosure Vulnerability (CNVD-2021-31951)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. There is a security vulnerability in SAP, and no details of the vulnerability are provided at this time...

6.5CVSS6.9AI score0.00809EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:0 a.m.8 views

SAP NetWeaver AS JAVA Content Spoofing Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A content spoofing vulnerability exists in SAP NetWeaver Application Server for Java versions 7.10, 7.11, 7.20,...

4.3CVSS6.6AI score0.00561EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:0 a.m.16 views

SAP NetWeaver AS ABAP Denial of Service Vulnerability (CNVD-2021-29099)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver AS ABAP versions 731, 740, and 750. The vulnerability...

6.5CVSS6.7AI score0.00862EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:0 a.m.46 views

SAP NetWeaver AS JAVA cross-site scripting vulnerability (CNVD-2021-29100)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS JAVA versions 7.10 and 7.11. An attacker can...

5.4CVSS6AI score0.00473EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:0 a.m.42 views

SAP NetWeaver Application Server for Java Access Control Error Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integration of the application platform, the platform mainly for SAP applications to provide a development environment. The platform mainly for SAP applications to provide a development and runtime environment.SAP NetWeaver...

6.5CVSS6.5AI score0.00635EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/04/16 12:0 a.m.35 views

SAP NetWeaver Application Server for Java Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

7.4CVSS6.3AI score0.0094EPSS
SaveExploits0References1
Rows per page
Query Builder