CVE-2021-33684

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77,...

CVE-2021-33684

CVE-2021-33684 affects SAP NetWeaver AS ABAP and ABAP Platform (multiple KRNL32NUC/KRNL32UC/KRNL64NUC/KRNL64UC/KERNEL versions). The issue is a memory corruption vulnerability caused by processing overly long content in RFC requests, which can crash the affected work process. The process then res...

CVE-2021-33678

CVE-2021-33678 affects SAP NetWeaver AS ABAP (Reconciliation Framework) across multiple releases (700–75F). A high-privilege attacker can inject code executed by the application, potentially deleting data and causing DoS/unavailability. Affected component: Reconciliation Framework function module...

CVE-2021-33678

A function module of SAP NetWeaver AS ABAP Reconciliation Framework, versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter (versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) is vulnerable to denial of service via sending multiple HTTP requests with different method types, crashing the filter and making the server unavailable. The root cause relates to the Http...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

CVE-2021-33677

The CVE-2021-33677 entry affects SAP NetWeaver ABAP Server and ABAP Platform, specifically versions 700, 702, 730, 731, 804, 740, 750, and 784. The issue stems from exposing internal functions externally, which can lead to information disclosure. The connected documents confirm the affected softw...

CVE-2021-33677

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 702, 730, 731, 804, 740, 750, 784, expose functions to external which can lead to information disclosure...

CVE-2021-33671

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

CVE-2021-33671

CVE-2021-33671 concerns SAP NetWeaver Guided Procedures (Administration Workset) across versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. The issue is a missing authorization check for an authenticated user, enabling privilege escalation and potential unauthorized read/modify/delete of restricted data...

CVE-2021-33670: Undefined Security Weakness

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

PT-2021-20267

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Administrator version 7.50 Description: The issue occurs when a user with insufficient privileges attempts to access any application in the Administrator applications, resulting in no security audit log being created. This impac...

PT-2021-20262 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT SAP NetWeaver AS ABAP and ABAP Platform versions KRNL64NUC 7.21,...

CVE-2021-33671: Missing Authorization

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

PT-2021-20249

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Guided Procedures Administration Workset versions 7.10 through 7.50 Description: The issue results from the lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could allow...

PT-2021-20256 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Reconciliation Framework versions 700 through 75F Description: A function module in the Reconciliation Framework of SAP NetWeaver AS ABAP allows a high-privileged attacker to inject code that can be executed by the...

PT-2021-20255 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 700, 702, 730, 731, 740, 750, 784 Description: The issue allows external exposure of functions, which can lead to information disclosure. Recommendations: For SAP NetWeaver ABAP Server and...

PT-2021-20265

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA Enterprise Portal versions 7.10 through 7.50 Description: The issue reveals sensitive information in one of its HTTP requests. An attacker can use this in conjunction with other attacks, such as XSS, to steal this...

PT-2021-20248

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java versions 7.10 through 7.50 Description: The issue allows an attacker to send multiple HTTP requests with different method types, thereby crashing the filter and making the HTTP server unavailable to other legitimate...

CVE-2021-33687: Exposure of Sensitive Information to an Unauthorized Actor

SAP NetWeaver AS JAVA Enterprise Portal, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50 reveals sensitive information in one of their HTTP requests, an attacker can use this in conjunction with other attacks such as XSS to steal this information...